yanchufasui
Pass
Audited by Gen Agent Trust Hub on Aug 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONDATA_EXFILTRATION
Full Analysis
- [COMMAND_EXECUTION]: The skill invokes local shell scripts and npm commands to automate the synchronization of project status and audit logs with external storage. These operations are integrated into the workflow to maintain a project war room dashboard.
- [REMOTE_CODE_EXECUTION]: The installation and update routines utilize npx to retrieve and execute packages from the author's official GitHub repository. This mechanism is used to distribute and update the skill's dependencies.
- [EXTERNAL_DOWNLOADS]: The skill performs network requests using curl and wget to verify the availability and integrity of published prototype URLs. This smoke testing ensures that external links in documentation are functional.
- [DATA_EXFILTRATION]: As part of its primary function, the skill uploads prototype builds, requirement documents, and project metadata to S3-compatible storage and OSS. This behavior is documented as necessary for sharing project progress with stakeholders.
Audit Metadata