use-native-credential-proxy

Pass

Audited by Gen Agent Trust Hub on Mar 29, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: No malicious patterns or security risks were identified. The skill's operations are consistent with its stated purpose of managing local credentials and updating the project source code.- [EXTERNAL_DOWNLOADS]: Fetches and merges code from the official author's repository at https://github.com/qwibitai/nanoclaw.git. As this repository is the primary source for the tool being modified and belongs to the identified vendor, this is a legitimate update mechanism.- [COMMAND_EXECUTION]: Utilizes standard development and system commands (git, npm, systemctl, launchctl) to apply code changes and manage local services. These operations are transparent and follow routine software maintenance workflows.- [CREDENTIALS_UNSAFE]: Encourages the secure handling of sensitive data by instructing the user to store API keys and tokens in a .env file. This avoids hardcoding secrets and adheres to standard practices for environment-based secret management.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 29, 2026, 07:39 AM