duel-agents-routing

Pass

Audited by Gen Agent Trust Hub on Jun 16, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: Fetches and installs Node.js packages from the @duel-agents npm namespace and clones a GitHub repository (github.com/2aronS/Duel-Agents.git). These resources are consistent with the skill's stated purpose and the author's identity.
  • [COMMAND_EXECUTION]: Instructs the agent to execute shell commands for installation (npx @duel-agents/install) and environment configuration (setting DUEL_API_KEY). These actions are required to set up the routing service for Claude Code, Cursor, and other tools.
  • [CREDENTIALS_UNSAFE]: References API key configuration via environment variables (e.g., DUEL_API_KEY). The skill documentation uses placeholders for example keys and correctly guides users toward secure secret management practices without including hardcoded credentials.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 16, 2026, 10:19 AM
Security Audit — agent-trust-hub — duel-agents-routing