client-package-local
Pass
Audited by Gen Agent Trust Hub on Mar 29, 2026
Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the
mkdir -pshell command to create the directory structure for client delivery packages on the local filesystem. - [DATA_EXFILTRATION]: The skill reads local lead data from CSV and JSON files and uploads it to Google Sheets. This is the primary function of the skill and uses a well-known service via the Rube MCP server.
- [SAFE]: No malicious patterns, obfuscation, or safety bypasses were detected. The skill's behavior aligns with its documented utility. While it processes local client data which is a potential surface for indirect injection, it includes steps to sanitize and clean the content during the packaging process.
Audit Metadata