skills/karakeep-app/karakeep/dev-env/Gen Agent Trust Hub

dev-env

Pass

Audited by Gen Agent Trust Hub on Oct 2, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes local shell scripts such as scripts/dev-worktree.sh via pnpm dev:worktree to coordinate starting multiple services (web and workers) within a git worktree. It also uses standard CLI tools like lsof, grep, and seq for process management and readiness checks.
  • [EXTERNAL_DOWNLOADS]: The skill performs dependency installation using pnpm install and suggests running a Docker container (docker run -p 7700:7700 getmeili/meilisearch:v1.41.0) to provide search capabilities. These are standard development operations for the Karakeep project.
  • [DYNAMIC_EXECUTION]: The environment setup process involves generating .env files with randomized secrets and performing database migrations using node --import tsx. These actions are performed to ensure each worktree has a unique, isolated configuration.
  • [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to monitor log files located in $TMPDIR and interact with a locally running web application via browser automation. While these are ingestion points for external data, they represent standard development workflows with no evidence of malicious intent.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 2, 2026, 12:31 AM