mom-status
Pass
Audited by Gen Agent Trust Hub on May 20, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the Bash tool to execute
mom status. Access is restricted via theallowed-toolsconfiguration to only commands starting withmom status*, preventing arbitrary command injection. - [CREDENTIALS_UNSAFE]: No hardcoded credentials were found. The skill specifically instructs the agent to detect and redact sensitive fields such as keys, tokens, cookies, and passwords from the command output using a
[REDACTED]placeholder. - [DATA_EXFILTRATION]: No network operations or data transmission patterns were detected. The skill focuses on providing a local status summary to the user.
- [EXTERNAL_DOWNLOADS]: The skill does not perform any external downloads or package installations. It relies on the pre-installed
momCLI tool, which is a legitimate resource from the author (momhq).
Audit Metadata