draft-cli

Pass

Audited by Gen Agent Trust Hub on May 20, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill installs the @innosage/draft-cli package from the npm registry, which is the official tool for interacting with the Draft service.
  • [COMMAND_EXECUTION]: Executable commands are restricted to the draft binary, which is used for managing the local connection daemon and performing document operations like creating, reading, and patching pages.
  • [DATA_EXFILTRATION]: The skill communicates with the vendor's primary service endpoint at https://draft.innosage.co to synchronize document content and comments, which is consistent with its stated purpose.
Audit Metadata
Risk Level
SAFE
Analyzed
May 20, 2026, 07:36 AM
Security Audit — agent-trust-hub — draft-cli