booking-notify
Pass
Audited by Gen Agent Trust Hub on May 11, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill executes standard commands for its lifecycle, including
bun installfor dependencies,bun runfor script execution, andgcloud run deployfor service deployment. These actions are consistent with the skill's stated purpose of managing a notification relay and sync process. - [EXTERNAL_DOWNLOADS]: External network operations are limited to interacting with official APIs for Cal.com and Pushover. These are well-known services and the interactions are necessary for the skill's functionality.
- [CREDENTIALS_UNSAFE]: The skill demonstrates safe credential handling practices by instructing the user to store API tokens in 1Password using the
opCLI and injecting them into the environment viamise, rather than hardcoding them into the instructions or scripts.
Audit Metadata