generate-perler-bead-pindou
Pass
Audited by Gen Agent Trust Hub on Aug 24, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
subprocess.run(Python) andspawnSync(Node.js) in its wrapper scripts (scripts/generate_perler_bead_pindou.py,scripts/generate_perler_bead_pindou.js). These calls are used to invoke internal helper scripts (run_api.pyandrun_api.js) within the same directory to perform HTTP requests. While these involve shell-like operations, the paths are statically constructed and the arguments are passed as lists, following best practices for local command invocation within an agent skill.
Audit Metadata