booking-notify

Pass

Audited by Gen Agent Trust Hub on May 11, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes standard commands for its lifecycle, including bun install for dependencies, bun run for script execution, and gcloud run deploy for service deployment. These actions are consistent with the skill's stated purpose of managing a notification relay and sync process.
  • [EXTERNAL_DOWNLOADS]: External network operations are limited to interacting with official APIs for Cal.com and Pushover. These are well-known services and the interactions are necessary for the skill's functionality.
  • [CREDENTIALS_UNSAFE]: The skill demonstrates safe credential handling practices by instructing the user to store API tokens in 1Password using the op CLI and injecting them into the environment via mise, rather than hardcoding them into the instructions or scripts.
Audit Metadata
Risk Level
SAFE
Analyzed
May 11, 2026, 01:40 AM