wayai
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONPERSISTENCEDATA_EXFILTRATIONEXTERNAL_DOWNLOADS
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill instructs the agent to install and update software from external vendor-controlled sources.
- Installs the WayAI CLI via 'npm i -g @wayai/cli@latest'.
- Updates the skill content via 'npx skills add wayai-pro/wayai-skill -y'.
- [COMMAND_EXECUTION]: The skill is designed to drive a shell-based workflow using various command-line tools.
- Extensively uses the 'wayai' CLI for hub, base, and credential management.
- Employs utilities like 'mkdir', 'ln', 'git', and 'npm' for environment initialization and workspace management.
- [PERSISTENCE]: The skill includes procedures to maintain its presence and functionality within the host environment.
- Creates directories and symbolic links (e.g., in '.claude/skills') to ensure the skill is correctly loaded and updated by the AI agent harness.
- [DATA_EXFILTRATION]: The skill transmits local workspace configurations to the vendor's cloud infrastructure as part of its core synchronization features.
- Synchronizes hub and base YAML files and associated resource content with official wayai.pro subdomains.
- [EXTERNAL_DOWNLOADS]: The skill retrieves its own updates and platform dependencies from trusted organization repositories.
- Fetches CLI updates and skill definitions from the npm registry and GitHub organization accounts associated with wayai-pro.
Audit Metadata