dev-local-setup

Pass

Audited by Gen Agent Trust Hub on Jun 24, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill's primary function is to generate a shell script (scripts/dev-local.sh) that uses tmux to manage long-lived development processes.
  • [COMMAND_EXECUTION]: The agent is instructed to perform a syntax check on the generated script using bash -n and to set execution permissions using chmod +x.
  • [SAFE]: The instructions explicitly prohibit the agent from running the generated launcher (up command) or starting any development servers itself.
  • [SAFE]: The skill includes clear directives to avoid inventing, printing, or injecting secrets or credentials into the generated scripts, recommending the use of existing environment variable examples instead.
  • [SAFE]: Repository investigation is restricted to analyzing local configuration files (e.g., package.json, Cargo.toml, docker-compose.yml) to determine legitimate service start commands and port mappings.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 24, 2026, 07:12 PM
Security Audit — agent-trust-hub — dev-local-setup