add-signal
Fail
Audited by Gen Agent Trust Hub on Jun 19, 2026
Risk Level: HIGHEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill uses a piped command pattern
curl ... | python3to fetch the latest version tag from the GitHub API and parse it using a Python one-liner. While used for version detection, this involves executing code derived from a remote network response. - [EXTERNAL_DOWNLOADS]: Downloads the
signal-clinative binary tarball directly from GitHub releases (github.com/AsamK/signal-cli) and extracts it into the user's local directory (~/.local). - [COMMAND_EXECUTION]: Instructs the user to execute numerous shell commands with significant side effects, including:
- System package installation via
sudo apt-get,brew, ordnf. - Service management using
systemctl(Linux) andlaunchctl(macOS). - Direct SQL execution against the project database (
data/v2.db) using a script runner (tsx) to insert user roles and group memberships. - Modifying the local source tree by pulling code from a remote Git branch (
origin/channels) and redirecting it into new files. - [DATA_EXFILTRATION]: The skill instructions involve handling sensitive Signal account data and credentials. It directs the user to store a phone number in a
.envfile and manages the Signal data directory (~/.local/share/signal-cli), which contains encryption keys and message databases.
Recommendations
- HIGH: Downloads and executes remote code from: https://api.github.com/repos/AsamK/signal-cli/releases/latest - DO NOT USE without thorough review
Audit Metadata