monitor-buying-signals
Pass
Audited by Gen Agent Trust Hub on Aug 21, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides instructions to install the
@cargo-ai/clipackage globally and execute various commands for account authentication, session management, and lead monitoring actions using the vendor's CLI tool. - [EXTERNAL_DOWNLOADS]: Fetches the vendor's CLI tool from the public NPM registry and suggests downloading additional skills using
npxfrom the vendor's GitHub repository to extend functionality. - [DATA_EXFILTRATION]: The skill reads the local agent's plugin configuration file (
~/.claude/plugins/installed_plugins.json) to detect existing installations of vendor tools and sends session metadata (ID, title, and summary) to the vendor's infrastructure for attribution and usage tracking.
Audit Metadata