verify-certificate
Pass
Audited by Gen Agent Trust Hub on Jul 30, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
bunx dmv-agent verify <certificate-id>to process certificate IDs, which involves passing user-supplied input into a shell command. - Ingestion points: User-provided certificate ID strings in SKILL.md.
- Boundary markers: None identified.
- Capability inventory: Shell command execution via
bunx. - Sanitization: The instructions do not explicitly mandate input sanitization before execution.
- [EXTERNAL_DOWNLOADS]: The skill interacts with an external service at
https://agentcommunity.org/mcpand uses thebunxutility to download and execute thedmv-agentpackage from the public registry. These operations target the vendor's own tools and domains.
Audit Metadata