Hazmat

Hazardous material classification tool

Security Scan

The skill's code, runtime instructions, and requested resources are consistent with a local CLI tool that stores and manages hazardous-material entries in a user data directory (~/.hazmat).

Purpose & Capability

Name/description (hazmat classification) align with the provided script: add/list/search/remove/export/stats/config operate on local JSONL data in a data directory. No unrelated credentials, binaries, or external services are requested.

Instruction Scope

SKILL.md instructs the agent to run scripts/script.sh with specific commands. The script reads/writes only to the configured data directory (HAZMAT_DIR or ~/.hazmat) and a config file within that directory. It does not access other system paths, environment secrets, or external endpoints.

Install Mechanism

There is no install step. The bundle includes a shell script that will be executed directly. The script performs only local filesystem operations and uses standard shell utilities; it does not download or execute external code.

Credentials

No required env vars or credentials. The only environment dependency is an optional HAZMAT_DIR (defaulting to $HOME/.hazmat), which is proportionate to a local CLI data store.

Persistence & Privilege

The skill persists data under the user's home directory (~/.hazmat) and does not request elevated privileges, system-wide configuration changes, or always:true persistence. This level of persistence is expected for a local data-management tool.

Scan Findings in Context

[no_findings] expected: Static scanner reported no matches. The included script's behavior (local file create/read/update in ~/.hazmat) is expected for this skill's purpose.

Assessment

This skill appears coherent and only performs local operations. Before installing, review the included scripts/script.sh to confirm you trust the author; it will create and write plaintext JSONL files in ~/.hazmat (or HAZMAT_DIR if you set it). If you plan to store sensitive information, consider: (1) setting HAZMAT_DIR to a controlled location, (2) checking and restricting file permissions on that directory, (3) backing up or auditing the data format, and (4) running the script in a sandbox first if you have any doubt. There are no network calls or requests for credentials in the bundle.

Hazardous material classification tool

Commands

status

scripts/script.sh status

Show current status

add

scripts/script.sh add

Add new entry

list

scripts/script.sh list

List all entries

search

scripts/script.sh search

Search entries

remove

scripts/script.sh remove

Remove entry by number

export

scripts/script.sh export

Export data to file

stats

scripts/script.sh stats

Show statistics

config

scripts/script.sh config

View or set config

help

scripts/script.sh help

version

scripts/script.sh version

Configuration

Use scripts/script.sh config <key> <value> to set preferences.

Variable	Required	Description
HAZMAT_DIR	No	Data directory (default: ~/.hazmat/)

Data Storage

All data stored in ~/.hazmat/ using JSONL format (one JSON object per line).

Output

Structured output to stdout. Exit code 0 on success, 1 on error.

---

Powered by BytesAgain | bytesagain.com | [e-mail]