kalodata
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
subprocess.Popeninscripts/kalodata/update.pyto run a background update check. This execution is confined to the skill's own code using the local Python interpreter and does not incorporate untrusted external input into the command line. - [EXTERNAL_DOWNLOADS]: The update mechanism fetches version metadata from the official GitHub API. It neutrally notifies the user of available updates via a terminal message and does not perform any automatic installation or execution of remote code.
- [SAFE]: The skill manages sensitive API keys by storing them in a dedicated configuration file (
~/.config/kalodata/config.toml) with restricted access permissions (0600), adhering to security best practices for credential management.
Audit Metadata