ic-headsets
Pass
Audited by Gen Agent Trust Hub on Jul 19, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The installation process fetches the skill definition file (SKILL.md) directly from the vendor's official domain at immersivecommons.com.
- [COMMAND_EXECUTION]: The skill provides standard shell commands for environment setup, including directory creation and API connectivity testing via curl.
- [DATA_EXFILTRATION]: The skill interacts with the Immersive Commons MCP API to manage hardware lending records. It transmits user-provided data (names, contact info, and damage descriptions) to the vendor's endpoint. This behavior is consistent with the skill's primary purpose and uses secure bearer token authentication.
Audit Metadata