durex
Pass
Audited by Gen Agent Trust Hub on Jun 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill adds the
durexpackage as a dependency to the project, downloading the source code from the author's public GitHub repository (agoodway/durex). It also optionally includes well-known community packages such asreqandredixbased on the user's storage backend choice. - [COMMAND_EXECUTION]: The skill uses the standard Elixir package manager command
mix deps.getto install and resolve dependencies after updating themix.exsconfiguration. - [DATA_EXFILTRATION]: The skill follows secure development practices by instructing users to manage sensitive credentials for third-party storage (like Tigris) using environment variables and template
.envfiles rather than hardcoding them into source code. - [SAFE]: All identified operations, including file modifications and dependency management, are standard for developer productivity tools and align with the skill's stated purpose of bootstrapping a library.
Audit Metadata