tc
Pass
Audited by Gen Agent Trust Hub on Jul 23, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill documentation (
distribution.md,dbs-books.md) provides command-line instructions for users to install the skill and manage its internal state. These include package management commands such asnpxfor installation andpython3for executing local scripts liketc_knowledge.pyto synchronize knowledge bases. - [EXTERNAL_DOWNLOADS]: The skill implements automated and manual processes for fetching external data. It utilizes
npxto fetch skill components from the author's GitHub repository and includes synchronization scripts to download updated business guidelines from documented external sources. - [SAFE]: The skill exhibits significant defensive design regarding data ingestion and user privacy. It includes a structured "source distillation" framework (
source-distillation.md) that categorizes information into four levels (L0 to L3) to ensure external data is verified before influencing business logic. Furthermore, it provides explicit guidelines for data de-sensitization in its feedback and knowledge routing modules to prevent accidental exposure of sensitive user information.
Audit Metadata