skills/momhq/mom/mom-status/Gen Agent Trust Hub

mom-status

Pass

Audited by Gen Agent Trust Hub on May 20, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses the Bash tool to execute mom status. Access is restricted via the allowed-tools configuration to only commands starting with mom status*, preventing arbitrary command injection.
  • [CREDENTIALS_UNSAFE]: No hardcoded credentials were found. The skill specifically instructs the agent to detect and redact sensitive fields such as keys, tokens, cookies, and passwords from the command output using a [REDACTED] placeholder.
  • [DATA_EXFILTRATION]: No network operations or data transmission patterns were detected. The skill focuses on providing a local status summary to the user.
  • [EXTERNAL_DOWNLOADS]: The skill does not perform any external downloads or package installations. It relies on the pre-installed mom CLI tool, which is a legitimate resource from the author (momhq).
Audit Metadata
Risk Level
SAFE
Analyzed
May 20, 2026, 05:06 PM
Security Audit — agent-trust-hub — mom-status