jam-proof
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFEREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill contains instructions to install the Jam CLI using a piped-to-shell command (
curl -fsSL https://native.jam.dev/install | bash). This script is sourced from the vendor's official domain. - [EXTERNAL_DOWNLOADS]: Fetches the CLI installation script from
native.jam.devand requires theagent-browserpackage, typically installed via NPM. - [COMMAND_EXECUTION]: The skill relies on shell commands to drive the recording process, including
jam record,jam auth, andagent-browser. It also uses signal handling (kill -INT) to manage background processes. - [DATA_EXFILTRATION]: Captures and uploads screen content, network logs, and console logs to the
jam.devplatform. The skill implements privacy safeguards by instructing the agent to use headless browser modes by default and requiring explicit user consent before recording a user's full display.
Audit Metadata