generate-ors-env
Pass
Audited by Gen Agent Trust Hub on May 7, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [SAFE]: The skill provides legitimate scaffolding templates for the Open Reward Standard framework without any detected malicious patterns or obfuscation.
- [EXTERNAL_DOWNLOADS]: The skill instructs the agent to include the
openrewardpackage from PyPI and references its official repository atgithub.com/Talc-AI/OpenReward. It also correctly warns against using the incorrectors-sdkpackage name, which helps prevent dependency confusion attacks. - [COMMAND_EXECUTION]: The provided templates include standard development commands for running a Python server (
python server.py) and validating endpoints usingcurl. These are appropriate for the skill's stated purpose of environment development. - [DATA_EXFILTRATION]: The instructions explicitly advise users to handle sensitive credentials like
E2B_API_KEYusing platform-specific secret management (Hugging Face Space secrets) instead of hardcoding them, aligning with security best practices.
Audit Metadata