sn-ppt-doctor
Pass
Audited by Gen Agent Trust Hub on May 1, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill's functionality is strictly limited to environment diagnostics and configuration assistance as described in its documentation.
- [COMMAND_EXECUTION]: The skill uses
subprocess.runto executenode --versionand check the help output of a sibling skill's runner script. These commands are used for version validation and environment discovery. They do not accept arbitrary user input and are executed using safe list-based arguments rather than a shell string. - [CREDENTIALS_UNSAFE]: The skill identifies missing API keys (e.g., SN_API_KEY) and offers an interactive prompt to save them into a local
.envfile. This is a standard and acceptable practice for local environment configuration and does not involve hardcoding secrets or unauthorized data exposure. - [EXTERNAL_DOWNLOADS]: No remote downloads or network requests were identified. The skill detects missing third-party libraries (like
pypdforpython-docx) and provides the user with the relevant installation commands to run manually. - [DATA_EXFILTRATION]: There are no network operations or patterns suggesting that sensitive data is being transmitted to external servers.
Audit Metadata