oneos-work-knowledge
Pass
Audited by Gen Agent Trust Hub on Oct 30, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/kb.pyutilizes thesubprocess.run()function to executegit showcommands. This functionality is used to retrieve specific file contents from a local Git repository based on a pinned commit SHA and path provided during execution. - [EXTERNAL_DOWNLOADS]: The script
scripts/kb.pyperforms network requests toopenapi-rdc.aliyuncs.com(Aliyun Codeup) to retrieve knowledge base documents and index files. Aliyun Codeup is a well-known cloud-based source code management service. - [SAFE]: Sensitive data management follows best practices by retrieving the required
ONEOS_CODEUP_TOKENfrom the environment rather than hardcoding it. Furthermore, the skill provides extensive documentation and strict design constraints to guide agent behavior without attempting to bypass safety protocols.
Audit Metadata