pixel-capi
Pass
Audited by Gen Agent Trust Hub on Mar 13, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides bash scripts that automate tasks by executing system commands like
curlto interact with APIs andjqto process JSON data. - [EXTERNAL_DOWNLOADS]: Outbound requests are directed to
graph.facebook.com, the official and well-known service domain for Meta's Graph API. - [CREDENTIALS_UNSAFE]: No hardcoded API keys or secrets were found; authentication tokens are retrieved from environment variables or local configuration files.
- [SAFE]: The skill correctly implements SHA-256 hashing for all sensitive user data (email, phone numbers, etc.) locally within its scripts before sending the data to external servers, protecting user privacy.
Audit Metadata