consensus-setup

Pass

Audited by Gen Agent Trust Hub on Aug 26, 2026

Risk Level: SAFECOMMAND_EXECUTIONCREDENTIALS_UNSAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses shell commands to inspect the local environment and verify the existence of configuration files and CLI tools.
  • Evidence: test -f ~/.codex/consensus.json && jq . ~/.codex/consensus.json, command -v pi, and checking for environment variables using grep.
  • [CREDENTIALS_UNSAFE]: The skill manages the OPENROUTER_API_KEY by reading from and writing to local .env files (~/.codex/.env and ~/.claude/.env). While it handles sensitive keys, it follows safe practices by instructing the agent not to print keys or write them to repository files, and it uses standard local environment file conventions.
  • Evidence: Instructions in references/command.md detail reading the key from ~/.codex/.env and providing a fallback to ~/.claude/.env.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 26, 2026, 04:47 AM
Security Audit — agent-trust-hub — consensus-setup