add-discord
Pass
Audited by Gen Agent Trust Hub on Aug 18, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATIONCREDENTIALS_UNSAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes standard package management commands (
pnpm run build) and test runners (vitest) to verify the installation. It also executes a local script (setup/lib/restart.sh) to apply the configuration changes. - [EXTERNAL_DOWNLOADS]: Fetches the
@chat-adapter/discordpackage from the NPM registry and copies source files from a specified git branch to implement the adapter. - [DATA_EXFILTRATION]: Interacts with official Discord API endpoints at
discord.comto validate the bot token and retrieve application information. These network operations are functional requirements for the integration and target a well-known service. - [CREDENTIALS_UNSAFE]: Manages sensitive bot tokens securely by using the
nc:promptdirective with thesecretattribute, ensuring the token is not logged or exposed, and stores it in the project's.envfile following standard configuration practices.
Audit Metadata