share-md
Warn
Audited by Gen Agent Trust Hub on May 13, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONDATA_EXFILTRATIONCREDENTIALS_UNSAFE
Full Analysis
- [PERSISTENCE]: The skill creates a macOS LaunchAgent by writing a plist file to
~/Library/LaunchAgents/com.kiro.share-md.<gist-id>.plist. This schedules_launchd_delete.shto run at a specific future time, establishing a mechanism for code execution that persists across reboots and occurs independently of the active agent session. - [COMMAND_EXECUTION]: The skill makes extensive use of system utilities and shell commands, including
launchctlto load and unload background tasks, andghfor GitHub interactions. - [CREDENTIALS_UNSAFE]: While the skill includes a
scan_secrets.shutility to detect credentials (AWS keys, GitHub tokens, etc.), theshare.shscript implements an advisory-only check. If secrets are found, it prints a warning and sleeps for 5 seconds before automatically proceeding to create the Gist. This behavior may result in the accidental exposure of sensitive information if the user or agent does not intervene during the short pause. - [DATA_EXFILTRATION]: The skill's primary purpose is to upload local file content to GitHub Gists. While this is the intended functionality, it facilitates the movement of potentially sensitive local data to an external service (GitHub), where it is accessible via a secret URL.
Audit Metadata