lan-chat

Pass

Audited by Gen Agent Trust Hub on Aug 7, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill implements a standalone local web server using only Python's standard library modules (e.g., http.server, socket, threading). It does not download or execute external code.
  • [COMMAND_EXECUTION]: The skill executes a local Python script (scripts/lan_chat.py) to host the chat service. The script is transparently provided and includes robust sanitization logic, such as using Path.name and regex to prevent directory traversal attacks during file uploads.
  • [DATA_EXPOSURE]: The server binds to 0.0.0.0 to allow local network access. While this makes the service accessible to any device on the same LAN, it is the intended primary function of the skill. The script includes a cleanup routine (shutil.rmtree) that deletes all uploaded files and message history when the service is stopped.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 7, 2026, 03:12 PM
Security Audit — agent-trust-hub — lan-chat