agent-alerts-execution
Pass
Audited by Gen Agent Trust Hub on Jul 30, 2026
Risk Level: SAFECOMMAND_EXECUTIONCREDENTIALS_UNSAFEDATA_EXFILTRATION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes a local helper script (
scripts/send_webhook.sh) which uses standard tools likecurlandjqto process and transmit data.- [CREDENTIALS_UNSAFE]: Accesses a sensitive token file at~/.config/agent-alerts/token.env. The implementation includes defensive measures such as verifying the file is owned by the current user and has restricted0600permissions. It avoids exposing the token in process logs by passing it via standard input to the transmission tool.- [DATA_EXFILTRATION]: Transmits alert payloads to a Supabase Edge Function (bsakakesupfudupbxflj.supabase.co). This communication is the intended purpose of the skill and targets a well-known service provider.
Audit Metadata