add-deltachat

Pass

Audited by Gen Agent Trust Hub on Aug 19, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses standard administrative commands for setup and maintenance, such as pnpm for building and testing, and systemctl/launchctl for service management. These are documented for the user to execute manually during the integration process.
  • [CREDENTIALS_SAFE]: The skill correctly instructs the user to store sensitive information like email credentials (DC_EMAIL, DC_PASSWORD) in a .env file. It does not contain hardcoded secrets or exfiltration patterns.
  • [EXTERNAL_DOWNLOADS]: The skill installs the @deltachat/stdio-rpc-server package from the official NPM registry, which is a standard procedure for adding functionality in Node.js environments.
  • [DATA_EXPOSURE]: It documents the location of account data (dc-account/) and provides instructions for its management and removal, ensuring the user is aware of where sensitive encryption keys are stored.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 19, 2026, 07:37 AM
Security Audit — agent-trust-hub — add-deltachat