book-installer

Pass

Audited by Gen Agent Trust Hub on May 1, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill makes extensive use of shell commands to manage project structure, create directories, copy templates, and configure environments using Conda and Pip.
  • [COMMAND_EXECUTION]: The optional 'Skill Tracker' feature installs global hooks in the user's ~/.claude/hooks/ directory and modifies ~/.claude/settings.json. These hooks log user prompts, execution duration, and token usage to local JSONL files for activity analysis.
  • [COMMAND_EXECUTION]: The 'Learning Graph Viewer' installation uses inline Python and sed to extract metadata from local JSON files and inject values into HTML templates.
  • [EXTERNAL_DOWNLOADS]: The skill automates the installation of standard Python packages from official registries, including mkdocs-material, pillow, cairosvg, and mkdocs-glightbox.
  • [EXTERNAL_DOWNLOADS]: Frontend templates provided by the skill reference well-known and established public CDNs (such as cdn.jsdelivr.net and unpkg.com) to load essential libraries for math rendering (KaTeX), graph visualization (vis-network), and commenting systems (Giscus).
Audit Metadata
Risk Level
SAFE
Analyzed
May 1, 2026, 09:00 PM