ThreatModel
Pass
Audited by Gen Agent Trust Hub on Aug 2, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes local TypeScript scripts using the
bunruntime, specifically its internal risk management tool (Tools/RiskRegister.ts) and a local asset graph utility (Atlas.ts), to automate security workflows. - [EXTERNAL_DOWNLOADS]: The skill communicates with a local notification service via
curlathttp://localhost:31337/notifyto provide status updates during its operation. - [DATA_EXFILTRATION]: The skill processes and stores sensitive security data, such as risk registers and asset maps, in a private local directory (
~/.claude/LIFEOS/USER/SECURITY/THREATMODEL/). It includes structural checks to prevent this data from being written into the skill's source tree.
Audit Metadata