lazyweb-remove-inspo-source

Pass

Audited by Gen Agent Trust Hub on Sep 13, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill performs standard configuration management by reading and writing to a local application-specific file (~/.lazyweb/libraries.json).
  • [COMMAND_EXECUTION]: Uses basic bash commands like cat to read configuration data, which is an expected and appropriate use of the tool for this skill's purpose.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes data from a local JSON file. While any external data ingestion carries a theoretical risk, the context here is limited to a specific configuration file with no exposure to high-privilege operations or network exfiltration, resulting in a safe assessment.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 13, 2026, 10:13 PM