skills/qwibitai/nanoclaw/add-matrix/Gen Agent Trust Hub

add-matrix

Pass

Audited by Gen Agent Trust Hub on Apr 26, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: Fetches and installs the @beeper/chat-adapter-matrix package from a well-known communication service provider.
  • [DYNAMIC_EXECUTION]: Includes a Node.js one-liner used to modify a dependency's file (dist/index.js) to fix ESM resolution issues by appending .js extensions to library imports. This is a localized compatibility patch.
  • [COMMAND_EXECUTION]: Utilizes standard shell commands for repository state management (git fetch, git show) and package management (pnpm install).
  • [DATA_EXPOSURE]: Provides clear instructions for managing sensitive Matrix credentials (passwords and tokens) via environment variables and .env files, which is a standard and recommended practice for secret management.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 26, 2026, 09:50 PM