hindsight-self-hosted
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions to download a CLI tool directly from the vendor's domain (
https://hindsight.vectorize.io/get-cli). Since the author of the skill is 'vectorize-io', this is a legitimate download of a vendor resource. - [REMOTE_CODE_EXECUTION]: The skill documents an installation pattern where a remote script is piped to bash (
curl -fsSL ... | bash). While generally a high-risk pattern, it is used here to install the vendor's own CLI and is presented as a setup instruction for the user to execute. - [COMMAND_EXECUTION]: The skill uses several shell commands to interact with the Hindsight CLI (
hindsight memory retain,hindsight memory recall) and to manage local configuration files (cat ~/.hindsight/config,chmod 600). These are standard operational commands for the intended functionality.
Audit Metadata