nooks
Pass
Audited by Gen Agent Trust Hub on Apr 14, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses local shell commands such as
grep,mkdir, andxargsto manage a directory-based database of markdown files. These operations are scoped to thekyp/nooks/workspace directory and are used for organization and searching. - [EXTERNAL_DOWNLOADS]: The skill facilitates API calls to the Google Places API (
places.googleapis.com) to automate the retrieval of location metadata. Google is a well-known service, and the use of its API for this purpose is standard functionality. - [CREDENTIALS_UNSAFE]: The skill provides clear instructions for the secure handling of API keys, explicitly recommending that users store keys in a local configuration file (
nooksconfig.yml) that remains outside of version control. - [DATA_EXFILTRATION]: No patterns of unauthorized data exfiltration were detected. All personal data and notes are stored locally in the user's workspace, and network activity is limited to the configured Google API.
Audit Metadata