skills/nanocoai/nanoclaw/add-discord/Gen Agent Trust Hub

add-discord

Pass

Audited by Gen Agent Trust Hub on Aug 18, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATIONCREDENTIALS_UNSAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes standard package management commands (pnpm run build) and test runners (vitest) to verify the installation. It also executes a local script (setup/lib/restart.sh) to apply the configuration changes.
  • [EXTERNAL_DOWNLOADS]: Fetches the @chat-adapter/discord package from the NPM registry and copies source files from a specified git branch to implement the adapter.
  • [DATA_EXFILTRATION]: Interacts with official Discord API endpoints at discord.com to validate the bot token and retrieve application information. These network operations are functional requirements for the integration and target a well-known service.
  • [CREDENTIALS_UNSAFE]: Manages sensitive bot tokens securely by using the nc:prompt directive with the secret attribute, ensuring the token is not logged or exposed, and stores it in the project's .env file following standard configuration practices.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 18, 2026, 03:10 AM
Security Audit — agent-trust-hub — add-discord