ThreatModel

Pass

Audited by Gen Agent Trust Hub on Aug 2, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATION
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes local TypeScript scripts using the bun runtime, specifically its internal risk management tool (Tools/RiskRegister.ts) and a local asset graph utility (Atlas.ts), to automate security workflows.
  • [EXTERNAL_DOWNLOADS]: The skill communicates with a local notification service via curl at http://localhost:31337/notify to provide status updates during its operation.
  • [DATA_EXFILTRATION]: The skill processes and stores sensitive security data, such as risk registers and asset maps, in a private local directory (~/.claude/LIFEOS/USER/SECURITY/THREATMODEL/). It includes structural checks to prevent this data from being written into the skill's source tree.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 2, 2026, 08:47 AM
Security Audit — agent-trust-hub — ThreatModel