iot-witness-verify
Warn
Audited by Gen Agent Trust Hub on Jul 17, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill uses
npxto download the@claude-flow/plugin-iot-cognitumpackage from the public npm registry. - [REMOTE_CODE_EXECUTION]: Executing code via
npxusing the@latesttag involves running unverified code fetched from a remote source at runtime. - [COMMAND_EXECUTION]: Utilizes Bash to execute the
cognitum-iotCLI tool for device verification processes.
Audit Metadata