bluesky-cascade-fetch
Pass
Audited by Gen Agent Trust Hub on Mar 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a specialized data acquisition utility for the Bluesky social network, utilizing official AT Protocol lexicons and well-known API endpoints for its primary functionality.
- [SAFE]: Credential management follows security best practices, utilizing environment variables for account identifiers and app passwords, with built-in logic to mask these values in logs and configuration checks.
- [SAFE]: The script implements significant robustness and safety features, including request throttling via a minimum interval, automated retries for transient HTTP errors (429, 5xx), and hard caps on the number of pages, posts, and threads fetched per run.
- [SAFE]: Data validation is performed on all incoming network responses, verifying JSON content-type, UTF-8 encoding, and the internal structure of seed posts and thread cascades to prevent processing of malformed data.
- [SAFE]: File system operations are restricted to writing data artifacts (JSON/JSONL) and logs to user-specified directories, with no evidence of unauthorized access to sensitive local files or persistence attempts.
- [SAFE]: The skill relies entirely on the Python standard library, eliminating risks associated with unverifiable or malicious third-party dependencies.
Audit Metadata