init
Pass
Audited by Gen Agent Trust Hub on Mar 25, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns or security vulnerabilities were detected. The skill performs a standard configuration process by reading and writing a local profile file based on user input.
- [DATA_EXFILTRATION]: No network operations or data transmission patterns were found. The skill only interacts with a local configuration file (".nutmeg.user.md").
- [COMMAND_EXECUTION]: The skill does not execute any shell commands or system-level processes. It uses the provided agent tools (Read, Write, AskUserQuestion) within their intended scope.
- [CREDENTIALS_UNSAFE]: The skill does not contain hardcoded credentials. It explicitly provides defensive security guidance, advising users to treat API keys as secrets and never commit them to version control.
Audit Metadata