let-it-be
Pass
Audited by Gen Agent Trust Hub on Jul 14, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill follows a strict offline-only policy, relying exclusively on built-in Node.js modules like
node:cryptoandnode:fsfor its logic. - [DATA_EXFILTRATION]: There are no network-capable operations or external data transfer mechanisms. The project constitution explicitly forbids cloud dependencies, ensuring all processing remains on the local machine.
- [REMOTE_CODE_EXECUTION]: The skill has zero external dependencies in
package.jsonand does not perform any remote script downloads or execution. - [COMMAND_EXECUTION]: No usage of unsafe execution functions such as
eval(),exec(), oros.system()was detected. CLI functionality is handled via standard Node.js utilities. - [CREDENTIALS_UNSAFE]: No hardcoded API keys, tokens, or credentials are present. Session storage for pseudonymization maps is stored locally with path validation to prevent directory traversal attacks.
Audit Metadata