olakai-get-started
Pass
Audited by Gen Agent Trust Hub on Mar 29, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes shell commands to diagnose the local environment, perform installations, and manage authentication.
- Recommends the use of
sudofor global npm installations when permission errors occur, which escalates process privileges. - Modifies the user's shell profile (
~/.bashrc) to append a new directory to the system PATH, a common persistence mechanism for CLI tools. - Uses
curlto interact with the vendor's signup API. - [EXTERNAL_DOWNLOADS]: Downloads the vendor's CLI (
olakai-cli) and SDKs (@olakai/sdk,olakai-sdk) from official package registries (npm and PyPI). - [DATA_EXFILTRATION]: Transmits user-provided registration information (email, company name, and full name) to the vendor's endpoint at
https://app.olakai.ai/api/auth/signup. This data transmission is documented and necessary for the skill's stated purpose of account creation.
Audit Metadata