appsignal
Pass
Audited by Gen Agent Trust Hub on May 9, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill manages authentication tokens by storing them in a dedicated directory (~/.config/appsignal) with restricted file permissions (0600), which is a recommended security practice for CLI tools.
- [SAFE]: All network operations are directed to the official AppSignal service domain (appsignal.com). The skill does not perform any unexpected background data exfiltration.
- [SAFE]: The implementation relies exclusively on the Ruby standard library (net/http, json, uri, fileutils). It does not download or install any external third-party packages or gems, eliminating supply chain risks.
- [SAFE]: No command injection or shell execution of untrusted input was detected. The scripts use ARGV for argument parsing and maintain control over executed commands.
- [SAFE]: The skill includes explicit instructions for the AI agent to request user confirmation before performing write operations, such as creating, updating, or deleting markers and uploading sourcemaps.
Audit Metadata