consensus-setup
Pass
Audited by Gen Agent Trust Hub on Aug 26, 2026
Risk Level: SAFECOMMAND_EXECUTIONCREDENTIALS_UNSAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses shell commands to inspect the local environment and verify the existence of configuration files and CLI tools.
- Evidence:
test -f ~/.codex/consensus.json && jq . ~/.codex/consensus.json,command -v pi, and checking for environment variables usinggrep. - [CREDENTIALS_UNSAFE]: The skill manages the
OPENROUTER_API_KEYby reading from and writing to local.envfiles (~/.codex/.envand~/.claude/.env). While it handles sensitive keys, it follows safe practices by instructing the agent not to print keys or write them to repository files, and it uses standard local environment file conventions. - Evidence: Instructions in
references/command.mddetail reading the key from~/.codex/.envand providing a fallback to~/.claude/.env.
Audit Metadata