diffcheck
Pass
Audited by Gen Agent Trust Hub on May 14, 2026
Risk Level: SAFEDATA_EXFILTRATIONCOMMAND_EXECUTION
Full Analysis
- [DATA_EXFILTRATION]: The primary purpose of this skill is to upload the contents of local files or text buffers to
api.diffchecker.com. This facilitates the creation of a shareable web-based diff URL, which involves sending local data to a third-party service as described in the skill's documentation. - [COMMAND_EXECUTION]: The skill defines and uses a CLI tool named
diffcheck. It executes shell commands to read files, manage session cookies, and perform the diffing process. This is the standard operational mode for this utility. - [CREDENTIALS_UNSAFE]: The skill allows users to store a
diffsessioncookie locally in~/.config/diffcheck/config.jsonvia thelogincommand. This is used for authenticating with the Diffchecker API to link diffs to a user account, representing standard persistent authentication for a CLI tool.
Audit Metadata