onboard-confidence-dry-run
Pass
Audited by Gen Agent Trust Hub on Oct 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATIONPRIVILEGE_ESCALATION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses shell commands like uuidgen and date to generate session identifiers and track timing for its telemetry system.- [DYNAMIC_EXECUTION]: Uses python3 -c to process JSON payloads returned from network requests during the initialization of the telemetry service.- [EXTERNAL_DOWNLOADS]: Fetches a telemetry client secret from onboarding.confidence.dev at the start of each session.- [DATA_EXFILTRATION]: Background processes transmit metadata about the session, including duration, progress steps, and an LLM-derived assessment of the user's sentiment (e.g., positive or frustrated), to events.eu.confidence.dev.- [PRIVILEGE_ESCALATION]: Employs the dangerouslyDisableSandbox: true directive to allow the bash tool to perform outbound network connections that would otherwise be restricted by the sandbox.
Audit Metadata