hooks
Pass
Audited by Gen Agent Trust Hub on Jul 6, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides an example of using
curlto send notifications to a Basecamp chatbot endpoint (3.basecamp.com). This is a documented example for a well-known service and uses placeholders for sensitive information. - [DATA_EXFILTRATION]: Mentions that sensitive tokens should be read from
.kamal/secrets, which is a standard security practice for managing secrets in Kamal projects. - [COMMAND_EXECUTION]: Explains how to create and make local scripts executable (
chmod +x) within the.kamal/hooksdirectory. This is standard behavior for configuring deployment hooks and does not involve elevated privileges or remote command injection.
Audit Metadata