gotify
Pass
Audited by Gen Agent Trust Hub on Aug 8, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/gotify_client.pyexecuteschcp 65001viasubprocess.runto set the Windows console code page to UTF-8. This is a benign, hardcoded command used for character encoding compatibility and does not accept user input. - [EXTERNAL_DOWNLOADS]: The skill documentation mentions a dependency on the
websocket-clientPython package for thews-subscribefeature. This is a standard, well-known library for WebSocket communication. - [DATA_EXPOSURE]: The skill reads authentication tokens and server URLs from
~/.wmyskills/.envorscripts/.env. This follows standard developer practices for local configuration management and does not exfiltrate sensitive system credentials.
Audit Metadata