safety-checker
Pass
Audited by Gen Agent Trust Hub on Feb 17, 2026
Risk Level: SAFE
Full Analysis
- COMMAND_EXECUTION (SAFE): The
scripts/safety-checker.shscript executescurlandjqto interact with a legitimate API. It includes proper JSON validation and error handling for dependencies. - EXTERNAL_DOWNLOADS (SAFE): The
SKILL.mdfile suggests installation vianpx skills addornpx clawhub, which are standard methods for installing AI agent skills. The referenced GitHub repository (github.com/barneyjm/camino-skills) is consistent with the skill's purpose. - DATA_EXFILTRATION (SAFE): The script sends location data (latitude/longitude) to
https://api.getcamino.ai/context. This is the intended primary purpose of the skill and the destination matches the documented service provider. No sensitive local files are accessed. - CREDENTIALS_UNSAFE (SAFE): The skill correctly uses an environment variable (
CAMINO_API_KEY) for authentication rather than hardcoding secrets. Instructions for setting up the environment variable in a settings file are provided as standard practice.
Audit Metadata