find-opportunities
Pass
Audited by Gen Agent Trust Hub on Mar 5, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses 'curl' via Bash to perform HTTP GET requests to the Karma API and 'uuidgen' to create unique invocation identifiers. These are standard operations for querying data from a remote service.
- [EXTERNAL_DOWNLOADS]: It communicates with 'gapapi.karmahq.xyz', which is the vendor's own infrastructure. This interaction is necessary for retrieving the program data requested by the user.
- [SAFE]: No malicious activities such as credential theft, prompt injection, or obfuscation were detected. The skill uses a public API and adheres to its documented workflow.
Audit Metadata