skills/wmy2981/skills/gotify/Gen Agent Trust Hub

gotify

Pass

Audited by Gen Agent Trust Hub on Aug 8, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The script scripts/gotify_client.py executes chcp 65001 via subprocess.run to set the Windows console code page to UTF-8. This is a benign, hardcoded command used for character encoding compatibility and does not accept user input.
  • [EXTERNAL_DOWNLOADS]: The skill documentation mentions a dependency on the websocket-client Python package for the ws-subscribe feature. This is a standard, well-known library for WebSocket communication.
  • [DATA_EXPOSURE]: The skill reads authentication tokens and server URLs from ~/.wmyskills/.env or scripts/.env. This follows standard developer practices for local configuration management and does not exfiltrate sensitive system credentials.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 8, 2026, 02:07 AM
Security Audit — agent-trust-hub — gotify