skills/openlark/skills/webtorrent/Gen Agent Trust Hub

webtorrent

Pass

Audited by Gen Agent Trust Hub on Aug 8, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides documentation and examples for using the official webtorrent and webtorrent-hybrid libraries. All external resources, including documentation and installation commands, point to official, well-known, and reputable sources (npm, esm.sh, GitHub).
  • [EXTERNAL_DOWNLOADS]: The skill references downloads for standard libraries like webtorrent, webtorrent-cli, and webtorrent-hybrid via the npm registry. These are well-known, legitimate packages for the stated purpose of BitTorrent functionality in JavaScript environments. Use of esm.sh for browser imports is a standard development practice for ESM modules.
  • [COMMAND_EXECUTION]: The CLI usage examples and installation commands (npm install) are standard for developer tools and do not include any hidden or obfuscated payloads.
  • [DATA_EXFILTRATION]: While the skill describes P2P file sharing (uploading/seeding), this is the primary and explicit purpose of a BitTorrent client. There are no patterns suggesting the exfiltration of sensitive local data (like credentials or private keys) to unauthorized third parties.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 8, 2026, 04:17 AM
Security Audit — agent-trust-hub — webtorrent