mac-hotspot-data-saver

Pass

Audited by Gen Agent Trust Hub on Oct 29, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill instructs the user to install the kilobat CLI tool via an external Homebrew tap (brew install seifip/kilobat/kilobat). This introduces a dependency on software maintained outside of official platform repositories.
  • [COMMAND_EXECUTION]: The skill relies on executing the kilobat command-line utility to perform network management tasks. Commands used include kilobat status, kilobat report, kilobat profile, kilobat limit, and kilobat block. These commands interact with system-level network settings.
  • [INDIRECT_PROMPT_INJECTION]: The skill has a vulnerability surface where it ingests and processes data from external tool outputs to drive its logic.
  • Ingestion points: Untrusted data enters the agent context through the output of kilobat status --json, kilobat report --json, kilobat conditions --json, and kilobat sessions --json in SKILL.md.
  • Boundary markers: No specific boundary markers or instructions are provided to the agent to distinguish between tool data and instructions.
  • Capability inventory: The skill includes capabilities for modifying network rules, blocking applications, and changing network profiles.
  • Sanitization: There is no evidence of data sanitization or validation performed on the CLI tool output before it is processed by the agent.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 29, 2026, 01:24 PM