rombot-cli
Pass
Audited by Gen Agent Trust Hub on Jul 29, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATION
Full Analysis
- [COMMAND_EXECUTION]: The skill operates by executing a Python script (
scripts/rombot-ask.py) to process user queries and manage local configuration. - [EXTERNAL_DOWNLOADS]: The skill instructions direct the user to install components from the author's GitHub repository via standard package management tools.
- [DATA_EXFILTRATION]: The skill transmits user queries to a remote API service to retrieve community-sourced information. This network activity is the primary purpose of the skill and targets the vendor's infrastructure.
- [CREDENTIALS_UNSAFE]: The skill implements secure local storage for API tokens, using a dedicated configuration file (
~/.config/rombot-cli/.env) with appropriate filesystem permissions (0o600) to protect the secret from other users on the system.
Audit Metadata