aid
Pass
Audited by Gen Agent Trust Hub on Jul 30, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill guides the agent to use
npx @agentcommunity/aid-doctorfor validating records and generating public keys. This involves executing code from the npm registry, but the package belongs to the skill's official namespace.\n- [COMMAND_EXECUTION]: The skill usesbashto executedigfor DNS record verification,curlfor HTTP endpoint status and signature checks, andopensslfor generating secure nonces for authentication.\n- [EXTERNAL_DOWNLOADS]: References official vendor libraries and tools available on npm (@agentcommunity/aid,@agentcommunity/aid-doctor) and PyPI (aid-discovery).\n- [SAFE]: All external resources, domains, and packages identified originate from the skill author's own infrastructure or well-known services like Cloudflare's DNS-over-HTTPS.
Audit Metadata