memento-flashcards
Pass
Audited by Gen Agent Trust Hub on Sep 5, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
python3to execute its own local helper scripts (memento_cards.pyandyoutube_quiz.py). These scripts perform file I/O on a local JSON database and fetch external data. This is standard operational behavior for this skill. - [EXTERNAL_DOWNLOADS]: The skill fetches YouTube transcripts using the
youtube-transcript-apilibrary. It also provides instructions for the user to install this package viapipif it is missing. These operations are directed at a well-known service (YouTube) and a standard package registry (PyPI). - [DATA_EXPOSURE]: The skill exports flashcard data to a CSV file at a path specified by the user. While this involves writing data to the file system, it is an explicit user-requested feature for data portability.
Audit Metadata