kya
Pass
Audited by Gen Agent Trust Hub on Jun 23, 2026
Risk Level: SAFEREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The installation process fetches and executes a shell script from the project's official GitHub repository to set up the tool.
- [COMMAND_EXECUTION]: The skill features a command-dispatching mechanism that parses custom magic links and re-invokes the tool's subcommands with escaped parameters.
- [DATA_EXFILTRATION]: The tool transmits signed attestations and metadata to external API endpoints belonging to the KYA and AWP infrastructure as part of its primary identity and matchmaking functionality.
- [SAFE]: All detected external operations and code downloads are associated with the vendor's verified infrastructure and are required for the skill's intended purpose.
Audit Metadata