skill-system-cli
Pass
Audited by Gen Agent Trust Hub on Apr 11, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The main script
sk.pyacts as a dispatcher that usessubprocess.runto execute other local tool scripts such astkt.sh,mem.py,msg.py, andskills.sh. This execution is confined to scripts within the repository and includes timeout protections. - [EXTERNAL_DOWNLOADS]: The
installdomain includes operations to manage skill modules, referencing the author's GitHub repository (arthur0824hao/skills) for updates and synchronization. These are documented vendor-owned resources. - [DATA_EXFILTRATION]: No evidence of unauthorized data exfiltration was found. The skill manages local messages in a
.sisyphus/inboxdirectory and interacts with a local PostgreSQL database for agent memory.
Audit Metadata