gramio
Pass
Audited by Gen Agent Trust Hub on Oct 27, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill includes utility scripts that perform network requests to well-known and trusted services.
gramio-upgrade/detect-versions.mjsfetches package metadata fromregistry.npmjs.orgto check for updates.gramio-pick-username/check-usernames.mjsfetches HTML fromt.meto verify username availability.examples/file-upload.tsreferences media hosted ongramio.dev.- [COMMAND_EXECUTION]: The skill provides and utilizes several Node.js introspection scripts under the
tools/and sub-skill directories. These scripts are used for: - Resolving and parsing local
@gramio/*type definitions innode_modulesto provide signature information to the agent. - Detecting installed versions of the framework within a user's project directory.
- These scripts use standard Node.js APIs (
fs,path,fetch) and do not execute arbitrary shell commands or untrusted code.
Audit Metadata