lan-chat
Pass
Audited by Gen Agent Trust Hub on Aug 7, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements a standalone local web server using only Python's standard library modules (e.g.,
http.server,socket,threading). It does not download or execute external code. - [COMMAND_EXECUTION]: The skill executes a local Python script (
scripts/lan_chat.py) to host the chat service. The script is transparently provided and includes robust sanitization logic, such as usingPath.nameand regex to prevent directory traversal attacks during file uploads. - [DATA_EXPOSURE]: The server binds to
0.0.0.0to allow local network access. While this makes the service accessible to any device on the same LAN, it is the intended primary function of the skill. The script includes a cleanup routine (shutil.rmtree) that deletes all uploaded files and message history when the service is stopped.
Audit Metadata