mac-bandwidth-monitor
Pass
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill suggests installing the
kilobatCLI tool via Homebrew from the author's tap (seifip/kilobat/kilobat). - [COMMAND_EXECUTION]: Executes various
kilobatCLI commands (e.g.,status,report,destinations,signature) to collect network metadata, process IDs, and code signature information. - [COMMAND_EXECUTION]: Provides administrative capabilities to terminate processes using
kilobat quit(including a--forcekill option) and to modify network filtering rules usingkilobat block. - [INDIRECT_PROMPT_INJECTION]:
- Ingestion points: The skill processes potentially untrusted data from the local system environment, such as process names, bundle IDs, network endpoints, and device labels in
SKILL.md. - Boundary markers: No explicit delimiters or warnings to ignore instructions embedded in the tool output are provided.
- Capability inventory: The skill can terminate local processes (
kilobat quit) and modify network access rules (kilobat block). - Sanitization: There is no evidence of sanitization or validation performed on the process names or hostnames before they are processed by the agent.
Audit Metadata