ai-setup
Pass
Audited by Gen Agent Trust Hub on Jul 10, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes shell commands to verify directory existence and filesystem permissions (e.g.,
test -d,test -w) for the local Obsidian vault. This is a standard procedure to ensure the agent has the necessary environment access.- [COMMAND_EXECUTION]: The skill automates Git repository management by executing commands such asgit init,git remote add, andgit commit. These operations are used to establish version control within the local vault directory.- [DATA_EXFILTRATION]: The skill performs agit pushoperation to synchronize the local vault with a remote repository. This involves transferring the contents of the vault (user documents) to an external URL. This behavior is documented as a primary feature for version control, and the remote destination is explicitly requested from the user during execution.- [EXTERNAL_DOWNLOADS]: The skill suggests the installation of additional tools vianpx skills add cristiano-pacheco/ai-tools. This reference points to resources managed by the skill's author and is consistent with the described setup process.
Audit Metadata