tla-plus
Pass
Audited by Gen Agent Trust Hub on Sep 8, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [External Download]: The
setup.shscript downloads thetla2tools.jarfile from official, well-known sources including the TLA+ GitHub repository and Maven Central. This is a standard procedure for installing the necessary formal verification toolchain. - [Command Execution]: The skill uses shell scripts to wrap Java commands for parsing, translating, and model-checking TLA+ specifications. These operations are restricted to the local environment and are used to provide the skill's core functionality.
- [Local Build Logic]: If the tool download fails, the setup script includes logic to locate and build the TLA+ tools from a local source repository using the
antbuild system.
Audit Metadata