skills/gramiojs/documentation/gramio/Gen Agent Trust Hub

gramio

Pass

Audited by Gen Agent Trust Hub on Oct 27, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill includes utility scripts that perform network requests to well-known and trusted services.
  • gramio-upgrade/detect-versions.mjs fetches package metadata from registry.npmjs.org to check for updates.
  • gramio-pick-username/check-usernames.mjs fetches HTML from t.me to verify username availability.
  • examples/file-upload.ts references media hosted on gramio.dev.
  • [COMMAND_EXECUTION]: The skill provides and utilizes several Node.js introspection scripts under the tools/ and sub-skill directories. These scripts are used for:
  • Resolving and parsing local @gramio/* type definitions in node_modules to provide signature information to the agent.
  • Detecting installed versions of the framework within a user's project directory.
  • These scripts use standard Node.js APIs (fs, path, fetch) and do not execute arbitrary shell commands or untrusted code.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 27, 2026, 11:45 AM