ecosystem-guide
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions for installing and running various CLI tools from the npm registry, including mcp-omnisearch, mcp-sqlite-tools, mcpick, and others via pnpm dlx (pnpx).\n- [COMMAND_EXECUTION]: Contains example bash commands for invoking ecosystem tools to perform tasks such as skill validation, session history querying, and environment variable loading.\n- [DATA_EXFILTRATION]: (Exposure) The guide references tools designed to access sensitive local file paths, such as session databases for Pi (
/.pi/pirecall.db) and Claude Code (/.claude/ccrecall.db), as well as environment variable files (.env). These accesses are intrinsic to the stated purpose of the described tools.
Audit Metadata