skills/danicat/skills/catalog/Gen Agent Trust Hub

catalog

Pass

Audited by Gen Agent Trust Hub on Aug 24, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATION
Full Analysis
  • [COMMAND_EXECUTION]: Multiple Python and Node.js utility scripts use subprocess calls to invoke local developer tools such as uv, ruff, pytest, and the buffer CLI. This behavior is intentional and supports the skill's core functions of environment bootstrapping and code validation.
  • [COMMAND_EXECUTION]: The social-copy skill provides instructions for the agent to use system utilities like pbcopy or xclip to pipe drafted content to the user's clipboard, facilitating manual social media posting workflows.
  • [EXTERNAL_DOWNLOADS]: The documentation instructs users to install CLI dependencies from official registries like NPM (@bufferapp/cli) or from the author's own established GitHub repositories (godoctor). These resources are managed through standard package managers.
  • [DATA_EXFILTRATION]: Writing and analytics skills perform authorized network requests to Google Search Console and Google Analytics APIs. The implementation uses standard OAuth 2.0 flows and stores sensitive tokens locally within the user's configuration directories.
  • [REMOTE_CODE_EXECUTION]: The gateway skill dynamically discovers and fetches instruction sets (SKILL.md files) from https://skills.danicat.dev based on user intent. This mechanism is used for loading text-based agent instructions rather than executable code.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 24, 2026, 12:36 PM