liki-master
Pass
Audited by Gen Agent Trust Hub on Aug 2, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill performs a version check at startup by fetching content from
https://liki.hk/skills/liki-master/VERSION. It also suggests updating the skill usingnpx, which involves downloading code from the vendor's package repository. - [COMMAND_EXECUTION]: The skill uses
curlto communicate with a JSON-RPC API athttps://liki.hk/jsonrpcfor astrology calculations. This is the primary method for generating chart data and is consistent with the skill's intended functionality. - [DATA_EXFILTRATION]: Birth information (date, time, and location) is sent to the vendor's API to generate astrology charts. The skill instructions explicitly warn users against sharing the local memory file (
liki-memory.json) and mandate that no personal identifiable information (PII) be included in feedback reports sent to the vendor. - [SAFE]: The skill implements a robust 'Gate' system and structured JSON-RPC error handling to ensure data integrity and prevent the model from hallucinating technical details.
Audit Metadata