add-whatsapp
Pass
Audited by Gen Agent Trust Hub on Aug 30, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads pinned Node.js packages (
@whiskeysockets/baileys,qrcode,pino) from the standard NPM registry. - [COMMAND_EXECUTION]: The skill executes local build and test commands (
pnpm run build,vitest) and runs a local setup script (tsx setup/index.ts) to handle the WhatsApp authentication handshake. - [EXTERNAL_DOWNLOADS]: It fetches internal project files (the adapter source code) from a different git branch (
channels) within the same repository. - [COMMAND_EXECUTION]: The helper script
scripts/wa-qr-browser.tsspawns a local HTTP server to display authentication QR codes in a browser and usesspawnto manage the authentication process, which is standard functionality for this setup.
Audit Metadata