open-knowledge-bug-report
Pass
Audited by Gen Agent Trust Hub on Jul 10, 2026
Risk Level: SAFE
Full Analysis
- [DATA_EXPOSURE]: The skill accesses diagnostic logs in
~/.ok/logs/and system metadata (OS version, disk space, locale). This is consistent with its stated purpose of generating a bug report for the OpenKnowledge tool. - [COMMAND_EXECUTION]: Instructs the agent to execute the
ok bug-reportCLI command. This is a primary function of the skill to generate a structured diagnostic bundle. - [EXTERNAL_DOWNLOADS]: Suggests updating the core tool via
npm install -g @inkeep/open-knowledge@latest. This refers to the official package from the skill's author (Inkeep) and is considered a legitimate maintenance instruction. - [DATA_EXFILTRATION]: While the skill creates a ZIP archive of system data, it explicitly outlines a redaction process that scrubs credentials (GitHub, AWS, Anthropic, OpenAI tokens) and personal file paths before the bundle is used, which follows security best practices for diagnostic tools.
Audit Metadata