copy-rewrite
Pass
Audited by Gen Agent Trust Hub on Aug 11, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill executes several local binary utilities (
rmbc-update-check,rmbc-analytics,rmbc-workspace) located within the skill's root directory or a dedicated configuration directory (~/.rmbc-skills). - [COMMAND_EXECUTION]: Uses the
sedutility to modify its local configuration file (~/.rmbc-skills/config.yaml) when the user opts in or out of telemetry. - [EXTERNAL_DOWNLOADS]: Provides an option to open an introductory video hosted on YouTube (
https://www.youtube.com/watch?v=zI8tNfefH1M), which is a recognized and well-known service. - [DATA_EXFILTRATION]: Implements a usage analytics mechanism. The analysis shows that this mechanism is transparently declared, checks a local
analytics_enabledconfiguration flag, and transmits only non-sensitive metadata (skill name and product tier).
Audit Metadata