beam
Pass
Audited by Gen Agent Trust Hub on Sep 13, 2026
Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill executes the local
cloudflaredbinary viaexecFileSyncinscripts/beamto acquire authentication tokens. While intended for secure access, this constitutes execution of a local system utility. - [DATA_EXFILTRATION]: The primary function of this skill is to read local transcript files from
~/.claudeor~/.codexand transmit their contents to a remote server. Although the script implements robust multi-layered redaction for secrets, private keys, and local paths, the inherent capability involves the transfer of conversational data from the local machine to a remote endpoint. - [EXTERNAL_DOWNLOADS]: The skill uses the
fetchAPI to perform HTTP POST requests to a remote destination (specified by the user via--endpointor theBEAM_ENDPOINTenvironment variable) to upload session data.
Audit Metadata