book-installer
Pass
Audited by Gen Agent Trust Hub on May 1, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill makes extensive use of shell commands to manage project structure, create directories, copy templates, and configure environments using Conda and Pip.
- [COMMAND_EXECUTION]: The optional 'Skill Tracker' feature installs global hooks in the user's
~/.claude/hooks/directory and modifies~/.claude/settings.json. These hooks log user prompts, execution duration, and token usage to local JSONL files for activity analysis. - [COMMAND_EXECUTION]: The 'Learning Graph Viewer' installation uses inline Python and
sedto extract metadata from local JSON files and inject values into HTML templates. - [EXTERNAL_DOWNLOADS]: The skill automates the installation of standard Python packages from official registries, including
mkdocs-material,pillow,cairosvg, andmkdocs-glightbox. - [EXTERNAL_DOWNLOADS]: Frontend templates provided by the skill reference well-known and established public CDNs (such as
cdn.jsdelivr.netandunpkg.com) to load essential libraries for math rendering (KaTeX), graph visualization (vis-network), and commenting systems (Giscus).
Audit Metadata