wayai
Pass
Audited by Gen Agent Trust Hub on May 12, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill automates the installation of its own CLI using
npm i -g @wayai/cli@latestand manages skill updates vianpx skills add wayai-pro/wayai-skill -y. These operations target the official NPM registry and the vendor's own repository. - [COMMAND_EXECUTION]: The skill uses the
wayaiCLI to perform hub operations such aspush,pull,login, andstatus. It also interacts withgitfor workspace management. These commands are integral to the stated purpose of the skill and are executed with explicit instructions to seek user confirmation (e.g., showinggit diffbefore committing). - [DATA_EXFILTRATION]: All documented network activity and deep links are directed to the official platform domains (e.g.,
app.wayai.pro,api.wayai.pro). There is no evidence of harvesting sensitive local files or redirecting data to unauthorized third-party services. - [CREDENTIALS_UNSAFE]: The skill describes secure credential management through the
wayai create-credentialcommand, which allows users to store API keys at the organization level rather than hardcoding them in configuration files.
Audit Metadata