soia-pkm-bootstrap-vault-ima
Pass
Audited by Gen Agent Trust Hub on Jul 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill installation process references the author's public repository on GitHub and suggests downloading the official client from Tencent's known domain (ima.qq.com).
- [COMMAND_EXECUTION]: Includes standard shell commands for installing the skill and managing its local configuration files within the user's home directory.
- [SAFE]: Promotes data privacy by explicitly directing the agent to ignore sensitive directories such as .git and .obsidian, as well as configuration files like .env during the synchronization process.
Audit Metadata