memento-flashcards

Pass

Audited by Gen Agent Trust Hub on Sep 5, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses python3 to execute its own local helper scripts (memento_cards.py and youtube_quiz.py). These scripts perform file I/O on a local JSON database and fetch external data. This is standard operational behavior for this skill.
  • [EXTERNAL_DOWNLOADS]: The skill fetches YouTube transcripts using the youtube-transcript-api library. It also provides instructions for the user to install this package via pip if it is missing. These operations are directed at a well-known service (YouTube) and a standard package registry (PyPI).
  • [DATA_EXPOSURE]: The skill exports flashcard data to a CSV file at a path specified by the user. While this involves writing data to the file system, it is an explicit user-requested feature for data portability.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 5, 2026, 12:07 PM