kalopilot-sender

Pass

Audited by Gen Agent Trust Hub on Apr 12, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes various system commands to manage its setup and automated reporting. This includes running npm to install required libraries, using pm2 for process management and cron-based scheduling, and spawning auxiliary Node.js scripts for message delivery. It also uses cross-platform commands (start, open, or xdg-open) to display a local QR code in the browser for WhatsApp authentication.\n- [EXTERNAL_DOWNLOADS]: During installation, the skill fetches several external components. It uses the npm registry to download the whatsapp-web.js and qrcode libraries and installs pm2 globally. Additionally, the skill's core functionality involves fetching analytics data from the official staging.kalodata.com API endpoint using a user-provided token.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 12, 2026, 07:52 AM