emulate-seed
Pass
Audited by Gen Agent Trust Hub on Apr 17, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides documentation and guidance for using the
emulatetool for API testing. The instructions emphasize security best practices, such as seeding authentication tokens with descriptive names rather than using real credentials inrules/auth-tokens.md. All external dependencies mentioned (e.g.,emulate,@emulators/*,@octokit/rest) are standard, well-known packages or official components of the documented tool from a trusted vendor. Network operations in examples target local ports (e.g.,localhost:4001), which is appropriate for local API emulation. The use of dummy tokens and private key placeholders in documentation (e.g., inreferences/upstream-github.md) is strictly for illustrative purposes and does not represent a credential leak.
Audit Metadata