anki-flashcards
Pass
Audited by Gen Agent Trust Hub on Jun 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
curlto interact with the AnkiConnect API hosted onlocalhost:8765. This is the standard and intended method for programmatic Anki management. - [COMMAND_EXECUTION]: On macOS systems, the skill executes
defaults writecommands to disable App Nap for Anki and Qt-related processes (net.ankiweb.dtop,net.ichi2.anki,org.qt-project.Qt.QtWebEngineCore). This is a documented performance configuration to prevent the application from being suspended while in the background. - [EXTERNAL_DOWNLOADS]: The skill includes workflows for downloading media files (images and audio) from external URLs directly into the Anki media collection using the
storeMediaFileAPI action. - [DATA_EXFILTRATION]: Network activity is restricted to the local loopback address (
localhost) for API control and specific user-provided or documentation-defined URLs for media resources. There is no evidence of unauthorized data transmission or credential harvesting.
Audit Metadata