smart-commuter-skill
Pass
Audited by Gen Agent Trust Hub on Jun 25, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill retrieves data from trusted government domains (data.gov.sg and onemap.gov.sg). These are well-known services and the skill's interaction with them is transparent and functional.
- [SAFE]: All scripts are implemented using Python's standard library, which removes the risk of supply chain attacks through external package registries.
- [SAFE]: API credentials are managed securely through environment variables; the repository only includes a non-sensitive .env.example template.
- [SAFE]: No malicious patterns such as prompt injection, obfuscation, or persistence mechanisms were identified in the source code or documentation.
- [SAFE]: The skill's local caching mechanism operates within a standard user-level directory (~/.hermes/cache/) and does not perform unauthorized file system modifications.
Audit Metadata