granola-install-auth
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes limited Bash tools (
brew,open,pgrep,defaults,ls) to install the application via Homebrew, open the official download page, and verify the installation status. These commands are restricted to their intended purposes and do not exhibit malicious behavior. - [EXTERNAL_DOWNLOADS]: The skill directs users to the official Granola website (
granola.ai) for software downloads. This is consistent with the skill's stated purpose of installing the service. - [CREDENTIALS_UNSAFE]: An example configuration string is provided in the documentation (
secret_ref=granola-client-v4), but it contains synthetic placeholders rather than actual secrets or hardcoded credentials.
Audit Metadata