follow-builders-lite
Pass
Audited by Gen Agent Trust Hub on Jul 2, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads public JSON feed files from a GitHub repository (
zarazhangrui/follow-builders). This is the core functionality of the skill and uses standard HTTP requests to retrieve static data. - [COMMAND_EXECUTION]: The
SKILL.mdfile provides instructions to run a bundled Python script (scripts/prepare_digest.py). The script is part of the skill's distribution and performs the data processing and fetching logic in a transparent manner. - [DATA_EXFILTRATION]: No sensitive data access or transmission to unauthorized domains was detected. The script reads only from the designated GitHub repository and its own local files, outputting the results to the console for the agent to read.
Audit Metadata