Skill Trust Decision
watch-cli
This is a documentation-only skill wrapper around the watch-cli CLI tool with well-documented behavior including network access, external API transcription, and optional browser cookie usage - all declared and user-consented.
Why this conclusion was reached
0/4 dimensions flagged Pass
Declared vs actual capability
Declared resources and inferred behavior are broadly aligned.
Review
Hidden execution and egress
3 lower-risk artifacts were extracted and still need context.
Pass
Attack chain and severe findings
There is no explicit malicious chain in the report.
Review
Dependencies and supply chain hygiene
Dependency information is incomplete, so supply-chain confidence stays limited.
What drove the risk score up
curl|bash installation pattern +10
Fallback installer uses remote script but includes SHA256 verification and Homebrew is preferred
Network data transfer declared +5
Audio upload to Kyma API is explicitly documented in SKILL.md
Browser cookie access documented +5
Optional feature requires explicit user opt-in per run
Most important evidence
Low Supply Chain
curl|bash installation fallback
The fallback installer downloads and executes a remote shell script from GitHub. However, it uses a pinned release (v0.3.4) with SHA256 verification of the tarball.
SKILL.md:13 Prefer Homebrew installation path. If using shell install, independently verify the installer script before execution.
Low Data Exfil
Audio transcription to external API
Extracted audio is uploaded to Kyma API for transcription. This is explicitly declared and documented as an opt-in feature with local transcription alternative.
SKILL.md:85 For sensitive content, use --with-local flag to run whisper.cpp offline instead of Kyma API.
Low Sensitive Access
Optional browser cookie access
WATCH_BROWSER=auto or --cookies flags enable browser cookie reading for authenticated content. Requires explicit user consent per run and only sends cookies to the relevant platform.
SKILL.md:36 Always obtain explicit user consent before enabling browser cookie access.
Declared capability vs actual capability
Network Pass
Declared READ
→ Inferred READ
SKILL.md line 85: 'video download goes to the platform' and 'audio track is uploaded to Kyma API' Filesystem Pass
Declared READ+WRITE
→ Inferred READ+WRITE
SKILL.md line 87: 'frames and video file stay on disk under ~/.watch-cli/archive' Environment Pass
Declared READ
→ Inferred READ
SKILL.md line 103: reads KYMA_API_KEY, WATCH_BROWSER environment variables Shell Pass
Declared WRITE
→ Inferred WRITE
SKILL.md line 53: executes 'watch <url>' and 'watch-archive' commands Suspicious artifacts and egress
Medium External URL
https://kymaapi.com/?src=skill:watch SKILL.md:105
Medium External URL
https://clawhub.ai/user/sonpiaz skill-card.md:9
Medium External URL
https://clawhub.ai/sonpiaz/skills/watch-cli skill-card.md:39
Dependencies and supply chain
There are no structured dependency warnings.
File composition
3 files · 174 lines
Markdown 2 files · 169 linesJSON 1 files · 5 lines
Files of concern · 2
SKILL.md curl|bash installation fallback · Audio transcription to external API · Optional browser cookie access · https://kymaapi.com/?src=skill:watch
skill-card.md https://clawhub.ai/user/sonpiaz · https://clawhub.ai/sonpiaz/skills/watch-cli
Other files · _meta.json
Security positives
No executable code in skill - only documentation wrapper
All capabilities declared in SKILL.md and skill-card.md
SHA256 verification for remote installer tarball
Local transcription alternative (--with-local) available
Browser cookie access requires explicit user opt-in
Known risks explicitly documented in skill-card.md
Open source project with verifiable GitHub repository