sales-tray
What this skill does
The skill provides documentation and guidance on using the Tray.ai platform, including API usage, token management, and integration best practices. It is a reference tool for developers and administra
github/sales-skills - Documentation - 89 stars
Threat analysis
Skill info
pkg:github/sales-skills/sales@01ed049?skill=sales-trayAssessments (1)
Documentation
Documentation via local-llm-review
references/tray-api-reference.md
The document mentions that the Tray GraphQL API is a backend-only API and must be invoked server-side. It also notes that client-side JavaScript calls are blocked by CORS. This is legitimate documentaBadge
Add the Anomity scan badge for sales-tray to your README.
How Anomity governs this at runtime
Scan-time vetting tells you what a skill says it will do. Anomity's Endpoint Sensor sees what agents actually do: it discovers skills alongside every other AI artifact on the endpoint, and runtime governance can allow, deny, or log the tool calls a skill triggers. Policy violations route to your SIEM, Slack, email, or Jira, backed by a queryable 90-day audit trail.
Book a 30-minute demo to see your own skill inventory.
Methodology and disputes
Every skill is assessed by the Anomity Skill Intelligence engine against its public source; findings indicate risk patterns, not confirmed exploitation. Maintainer of sales-tray? Report an issue or request a rescan.
