api-pro

Pass

Audited by Gen Agent Trust Hub on Feb 17, 2026

Risk Level: SAFE
Full Analysis
  • [Prompt Injection] (SAFE): No instructions attempting to override agent behavior or bypass safety guidelines were found. The documentation actually provides safety best practices like human-in-the-loop (HITL) requirements.
  • [Data Exposure & Exfiltration] (SAFE): No hardcoded credentials or unauthorized access to sensitive files. The documentation explicitly warns against exposing raw API keys and encourages the use of environment variables.
  • [Remote Code Execution] (SAFE): No patterns of downloading and executing remote scripts or unverified packages were detected.
  • [Command Execution] (SAFE): No dangerous shell commands or unauthorized subprocess spawning detected.
  • [Obfuscation] (SAFE): No encoded or hidden content was found across the analyzed files.
  • [Indirect Prompt Injection] (SAFE): The validate-api.ts script fetches external data but implements strict schema validation using Zod, which is a recommended practice to mitigate risks from external data ingestion.
Audit Metadata
Risk Level
SAFE
Analyzed
Feb 17, 2026, 06:33 PM