bot-status
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses several shell commands to gather system status, including
ls,cat,curl,sqlite3,du,wc, and custom CLI tools liketd. All commands are diagnostic and read-only in nature. - [DATA_EXPOSURE]: The skill accesses local configuration files (
.pi/settings.json,package.json) and data files (MEMORY.md,.pi/db/aivena.db). However, it includes explicit security instructions to mask sensitive data such as bot tokens and API keys, only confirming their presence rather than displaying them. - [SAFE]: The skill follows least-privilege principles by using the
-readonlyflag for SQLite queries and explicitly stating it should not modify any state during diagnostics.
Audit Metadata