Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides numerous examples of shell commands for the
wacrawlandwacliCLI tools. These commands are used for legitimate WhatsApp management, including syncing history, searching messages, checking unread counts, and sending messages. - [SAFE]: The skill contains explicit safety instructions to prevent unintended actions, such as: 'Never send or mutate WhatsApp state unless explicitly requested' and 'Prefer read-only wacli commands for inspection'. It also warns against modifying sensitive internal files like
session.db. - [DATA_EXPOSURE]: While the skill interacts with private communication data (WhatsApp), it operates via local CLI tools on the user's machine. There are no patterns of exfiltrating this data to external or untrusted domains.
Audit Metadata