lotto-results

Pass

Audited by Gen Agent Trust Hub on Sep 17, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill instructs the agent to install the k-lotto package from the public NPM registry (npm install -g k-lotto). It also uses npx to fetch instructions and legal disclaimers from the @nomadamas/k-skill package. Since these packages are associated with the skill's author ('nomadamas'), this is considered standard vendor functionality.
  • [COMMAND_EXECUTION]: The skill executes shell commands to run Node.js snippets. These snippets use the k-lotto library to fetch lottery results and check winning numbers. This behavior is consistent with the skill's primary purpose and does not include any suspicious command patterns.
  • [DATA_EXPOSURE]: The instructions explicitly forbid the storage of plaintext credentials or the permanent storage of user lottery numbers, minimizing the risk of sensitive data exposure.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 17, 2026, 07:49 AM