lotto-results
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the agent to install the
k-lottopackage from the public NPM registry (npm install -g k-lotto). It also usesnpxto fetch instructions and legal disclaimers from the@nomadamas/k-skillpackage. Since these packages are associated with the skill's author ('nomadamas'), this is considered standard vendor functionality. - [COMMAND_EXECUTION]: The skill executes shell commands to run Node.js snippets. These snippets use the
k-lottolibrary to fetch lottery results and check winning numbers. This behavior is consistent with the skill's primary purpose and does not include any suspicious command patterns. - [DATA_EXPOSURE]: The instructions explicitly forbid the storage of plaintext credentials or the permanent storage of user lottery numbers, minimizing the risk of sensitive data exposure.
Audit Metadata