uninstall
Pass
Audited by Gen Agent Trust Hub on Apr 29, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses various shell commands such as
rm,sed,jq, and the macOSsecurityutility to identify and remove plugin artifacts. - [COMMAND_EXECUTION]: Utilizes inline Python scripts (
python3 -c) to programmatically parse and update JSON configuration files (e.g.,settings.json,installed_plugins.json) to remove plugin references. - [CREDENTIALS_UNSAFE]: Interacts with the macOS keychain to find and delete stored tokens for Telegram and Slack as part of the cleanup process. Access is targeted specifically to keys created by the plugin.
- [DATA_EXFILTRATION]: Performs broad scans of user configuration files and shell profiles (
~/.zshrc,~/.bashrc) to locate environmental exports. No network operations or external data transmissions are present.
Audit Metadata