add-whatsapp-cloud
Pass
Audited by Gen Agent Trust Hub on Apr 26, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill installs the
@chat-adapter/whatsapppackage version4.26.0usingpnpm. This is a pinned dependency from the NPM registry required for the adapter functionality. - [COMMAND_EXECUTION]: The installation steps utilize shell commands to fetch code from a git branch (
git fetch origin channels), retrieve the adapter file (git show), and build the project (pnpm run build). These are standard development operations within the project context. - [CREDENTIALS_UNSAFE]: The skill instructs users on how to obtain and store their own sensitive API credentials (access tokens and app secrets) in a
.envfile. No hardcoded credentials are present, and the instructions follow standard secret management practices. - [DATA_EXFILTRATION]: The command
cp .env data/env/envcopies sensitive environment variables to a subdirectory. This is typically used for local container volume mounting and does not involve sending data to external or untrusted destinations.
Audit Metadata