add-deltachat
Pass
Audited by Gen Agent Trust Hub on May 4, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONREMOTE_CODE_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill installs the
@deltachat/stdio-rpc-serverpackage from the NPM registry and retrieves updated adapter code from the project's remote Git repository (origin/channels). These are routine operations for adding functionality to a software project. - [COMMAND_EXECUTION]: The skill employs various CLI tools such as
pnpm,sqlite3,systemctl, andlaunchctlto manage dependencies, databases, and system services. These actions are restricted to the local development environment and are necessary for the channel's integration. - [REMOTE_CODE_EXECUTION]: The skill runs a local initialization script (
scripts/init-first-agent.ts) and a Node.js snippet for DNS resolution. These executions are part of the intended setup process and do not involve untrusted remote sources.
Audit Metadata