agently
Pass
Audited by Gen Agent Trust Hub on Oct 13, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements security best practices by separating model-driven decisions from host-side deterministic validation to prevent unauthorized actions.
- [SAFE]: Sensitive configuration, such as API keys, is managed using environment variables as seen in
SETTINGS.yaml, avoiding credential exposure. - [SAFE]: External dependencies specified in
requirements.txtare well-known, versioned packages from official registries. - [SAFE]: Dynamic imports used in the test suite (
assets/full-stack-reference/tests/test_trace.py) are for loading local project modules and do not introduce remote code execution risks. - [SAFE]: The framework documentation (
references/context-and-skills.md) includes explicit security considerations regarding trust levels for remote skill installation and path traversal prevention for workspace actions.
Audit Metadata