use-extrabrain
Pass
Audited by Gen Agent Trust Hub on Oct 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill executes the
extrabrainCLI for document management tasks. This includes commands likeextrabrain documents import,list,search, anddelete. These are local operations interacting with the vendor's own application via a local listener on127.0.0.1:37373. - [EXTERNAL_DOWNLOADS]: The skill provides a link to the official
ExtraBrain-cliGitHub repository for installation instructions and uses theextrabrain updatecommand to update the local CLI tool. These are standard maintenance operations for a vendor-provided tool. - [SAFE]: The skill explicitly instructs the agent not to access sensitive database files directly, not to extract credentials, and to obtain user intent before performing destructive actions like deletion. It also correctly advises using
.envor system settings for configuration rather than hardcoding secrets.
Audit Metadata