fortune-cookie

Pass

Audited by Gen Agent Trust Hub on Jun 24, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: Extensive review of the source code and associated project files revealed no malicious patterns. The skill is designed for entertainment and productivity enhancement through humorous console output.
  • [EXTERNAL_DOWNLOADS]: The skill recommends standard installation via the NPM registry (npm install -g fortune-cookie-cli) and references the author's public GitHub repository (mturac/fortune-cookie-cli). These are legitimate software distribution methods and are classified as safe.
  • [COMMAND_EXECUTION]: The CLI logic implemented in bin/fortune.js and src/index.js uses the reputable commander library. The commands are limited to predefined local actions (initializing configuration, listing personalities, and displaying fortunes) and do not involve the execution of arbitrary shell commands or unsafe user input processing.
  • [DATA_EXFILTRATION]: No network activity or data transmission code was detected. While the project's marketing materials (README, Viral Strategy) mention potential future integrations with Slack or Twitter, the current implementation only interacts with the local console and a configuration file in the user's home directory.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 24, 2026, 03:34 AM
Security Audit — agent-trust-hub — fortune-cookie