sikaru-setup
Pass
Audited by Gen Agent Trust Hub on Nov 4, 2026
Risk Level: SAFEREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill provides a shell command to install the Sikaru CLI by downloading a script from the vendor's official domain (https://app.sikaru.ai/install.sh) and piping it to the shell. This is a standard installation pattern provided by the vendor.
- [EXTERNAL_DOWNLOADS]: The skill includes instructions to download and install official vendor packages from public registries, including the Python package 'sikaru-sdk' and the Node.js packages '@aadi-labs/sikaru-sdk' and '@aadi-labs/sikaru-cli'.
- [COMMAND_EXECUTION]: The skill uses local shell commands such as 'sikaru login', 'sikaru config', and 'sikaru doctor' to manage project credentials and configuration. These operations are within the expected scope of a setup and authentication tool.
Audit Metadata