agnost-ai
Pass
Audited by Gen Agent Trust Hub on Nov 3, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
execFileSyncinscripts/run.mjsto orchestrate its own helper scripts (detect.mjs,provision.mjs,instrument.mjs,send-demo.mjs). These are internal skill components and do not execute arbitrary user input. - [EXTERNAL_DOWNLOADS]: The skill modifies project configuration files (
package.json,requirements.txt,pyproject.toml) to add dependencies for Agnost SDKs (agnost,agnostai,agnost-mcp) and OpenTelemetry packages. These are standard integration steps for a telemetry service. - [REMOTE_CODE_EXECUTION]: The skill performs network operations via
fetchto communicate with Agnost's official endpoints (api.agnost.ai,otel.agnost.ai) for provisioning organization IDs and sending test telemetry events. These operations are scoped to the service's primary function.
Audit Metadata