weekend-planner-skill
Pass
Audited by Gen Agent Trust Hub on Jun 25, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches data from official Singapore government services including data.gov.sg and onemap.gov.sg. These are well-known, trusted domains used for the skill's primary purpose.
- [COMMAND_EXECUTION]: Provides a local Python CLI script for processing activity requests. The logic is self-contained and does not execute arbitrary shell commands or untrusted external code.
- [SAFE]: Implements local caching of API responses in
~/.hermes/cache/to improve performance and adhere to API provider rate limits, following standard software development practices. - [SAFE]: The skill processes text data from external government APIs (such as weather forecasts and hawker closure reasons). While this constitutes an indirect prompt injection surface, the risk is negligible due to the trusted nature of the data sources and the descriptive usage of the data in the output.
Audit Metadata