ai-setup

Pass

Audited by Gen Agent Trust Hub on Jul 10, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATION
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes shell commands to verify directory existence and filesystem permissions (e.g., test -d, test -w) for the local Obsidian vault. This is a standard procedure to ensure the agent has the necessary environment access.- [COMMAND_EXECUTION]: The skill automates Git repository management by executing commands such as git init, git remote add, and git commit. These operations are used to establish version control within the local vault directory.- [DATA_EXFILTRATION]: The skill performs a git push operation to synchronize the local vault with a remote repository. This involves transferring the contents of the vault (user documents) to an external URL. This behavior is documented as a primary feature for version control, and the remote destination is explicitly requested from the user during execution.- [EXTERNAL_DOWNLOADS]: The skill suggests the installation of additional tools via npx skills add cristiano-pacheco/ai-tools. This reference points to resources managed by the skill's author and is consistent with the described setup process.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 10, 2026, 01:51 PM
Security Audit — agent-trust-hub — ai-setup