nooa-trace-viewer

Pass

Audited by Gen Agent Trust Hub on Aug 13, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill describes the installation and usage of a local development tool (the nooa trace viewer) using standard commands and configurations.
  • [DATA_EXPOSURE]: The skill mentions using ~/.config/nooa/traces.db for trace persistence. This is identified as standard application behavior for local data storage and configuration management within a user's home directory.
  • [COMMAND_EXECUTION]: The instructions include usage of vendor-specific CLI commands such as nooa start-dev and nooa import-traces. These operations are documented as the primary purpose of the skill for managing agent traces locally.
  • [EXTERNAL_DOWNLOADS]: Mentions uv sync --extra viewer for dependency management. This follows standard Python development practices for installing package extras from official registries.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 13, 2026, 08:15 AM
Security Audit — agent-trust-hub — nooa-trace-viewer