webtorrent
Pass
Audited by Gen Agent Trust Hub on Aug 8, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides documentation and examples for using the official
webtorrentandwebtorrent-hybridlibraries. All external resources, including documentation and installation commands, point to official, well-known, and reputable sources (npm, esm.sh, GitHub). - [EXTERNAL_DOWNLOADS]: The skill references downloads for standard libraries like
webtorrent,webtorrent-cli, andwebtorrent-hybridvia thenpmregistry. These are well-known, legitimate packages for the stated purpose of BitTorrent functionality in JavaScript environments. Use ofesm.shfor browser imports is a standard development practice for ESM modules. - [COMMAND_EXECUTION]: The CLI usage examples and installation commands (
npm install) are standard for developer tools and do not include any hidden or obfuscated payloads. - [DATA_EXFILTRATION]: While the skill describes P2P file sharing (uploading/seeding), this is the primary and explicit purpose of a BitTorrent client. There are no patterns suggesting the exfiltration of sensitive local data (like credentials or private keys) to unauthorized third parties.
Audit Metadata