rombot-cli
Pass
Audited by Gen Agent Trust Hub on Jul 24, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill invokes a local Python script
scripts/rombot-ask.pyvia the Bash tool to process queries. - [EXTERNAL_DOWNLOADS]: The script communicates with a remote API endpoint (defaulting to api.rombot.uk) using the
urlliblibrary to fetch community-grounded answers and citations. - [DATA_EXFILTRATION]: The tool transmits user queries and a service-specific token to the configured API endpoint. This behavior is consistent with the skill's primary stated purpose of querying a remote knowledge base.
- [SAFE]: The skill demonstrates good security posture by applying restrictive file permissions (
0o600) to its local configuration file (~/.config/rombot-cli/.env) to protect the user's API token from other local processes.
Audit Metadata