agently

Pass

Audited by Gen Agent Trust Hub on Oct 13, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill implements security best practices by separating model-driven decisions from host-side deterministic validation to prevent unauthorized actions.
  • [SAFE]: Sensitive configuration, such as API keys, is managed using environment variables as seen in SETTINGS.yaml, avoiding credential exposure.
  • [SAFE]: External dependencies specified in requirements.txt are well-known, versioned packages from official registries.
  • [SAFE]: Dynamic imports used in the test suite (assets/full-stack-reference/tests/test_trace.py) are for loading local project modules and do not introduce remote code execution risks.
  • [SAFE]: The framework documentation (references/context-and-skills.md) includes explicit security considerations regarding trust levels for remote skill installation and path traversal prevention for workspace actions.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 13, 2026, 11:10 AM