agnt-cli-builder
Pass
Audited by Gen Agent Trust Hub on Jun 27, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill installs the
@agntdev/clipackage globally via NPM and usesnpx skills update -yfor environment maintenance. These are vendor-owned tools associated with the skill's primary functionality. - [COMMAND_EXECUTION]: The skill performs extensive shell command execution using
agnt,gh,git, andnpm. These commands are used for task discovery, authentication, repository management, and PR submission as part of the intended builder workflow. - [PROMPT_INJECTION]: The skill includes instructions to monitor the input prompt for specific patterns like
Connect code: AGNT-XXXXX-XXXXX. When detected, it automatically executesagnt connectto perform delegate authentication. This is a functional design feature for streamlined authentication. - [DATA_EXFILTRATION]: The skill manages authentication tokens using
agnt loginandagnt connect, which store credentials in the OS keyring or a local configuration directory (~/.agnt). Network communication is limited to the vendor's API (api.agnt-gm.ai) and GitHub.
Audit Metadata