add-deltachat
Pass
Audited by Gen Agent Trust Hub on Aug 19, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses standard administrative commands for setup and maintenance, such as
pnpmfor building and testing, andsystemctl/launchctlfor service management. These are documented for the user to execute manually during the integration process. - [CREDENTIALS_SAFE]: The skill correctly instructs the user to store sensitive information like email credentials (
DC_EMAIL,DC_PASSWORD) in a.envfile. It does not contain hardcoded secrets or exfiltration patterns. - [EXTERNAL_DOWNLOADS]: The skill installs the
@deltachat/stdio-rpc-serverpackage from the official NPM registry, which is a standard procedure for adding functionality in Node.js environments. - [DATA_EXPOSURE]: It documents the location of account data (
dc-account/) and provides instructions for its management and removal, ensuring the user is aware of where sensitive encryption keys are stored.
Audit Metadata