skills/agoodway/goodskills/durex/Gen Agent Trust Hub

durex

Pass

Audited by Gen Agent Trust Hub on Jun 16, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill adds the durex package as a dependency to the project, downloading the source code from the author's public GitHub repository (agoodway/durex). It also optionally includes well-known community packages such as req and redix based on the user's storage backend choice.
  • [COMMAND_EXECUTION]: The skill uses the standard Elixir package manager command mix deps.get to install and resolve dependencies after updating the mix.exs configuration.
  • [DATA_EXFILTRATION]: The skill follows secure development practices by instructing users to manage sensitive credentials for third-party storage (like Tigris) using environment variables and template .env files rather than hardcoding them into source code.
  • [SAFE]: All identified operations, including file modifications and dependency management, are standard for developer productivity tools and align with the skill's stated purpose of bootstrapping a library.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 16, 2026, 06:00 AM
Security Audit — agent-trust-hub — durex