rhyme

Pass

Audited by Gen Agent Trust Hub on Jul 21, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes a local shell script (datamuse.sh) to query the Datamuse API for syllable counts and synonyms. This is an intended function of the skill.
  • [EXTERNAL_DOWNLOADS]: The skill uses curl to interact with the Datamuse API, which is a well-known service for linguistic data and vocabulary. This activity is restricted to a legitimate external service.
  • [PROMPT_INJECTION]: The skill enables project-level template overrides, allowing it to load configuration from the current project directory. This represents a surface for indirect prompt injection if a project contains untrusted markdown files.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 21, 2026, 07:55 PM
Security Audit — agent-trust-hub — rhyme