open-codesign-ai-design

Pass

Audited by Gen Agent Trust Hub on May 17, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: Fetches installation packages from the official GitHub repository (OpenCoworkAI/open-codesign) and supports standard package managers like Homebrew and Scoop.
  • [REMOTE_CODE_EXECUTION]: Includes instructions to install the Ollama local LLM runtime using a shell script downloaded from ollama.com.
  • [COMMAND_EXECUTION]: Advises macOS users to use the xattr command to remove the quarantine attribute from the downloaded application to bypass Gatekeeper warnings for non-notarized software.
  • [CREDENTIALS_UNSAFE]: Mentions the configuration of API keys for multiple providers (Anthropic, OpenAI, Google, etc.). The skill encourages safe practices by recommending environment variables and local configuration files rather than hardcoding secrets.
Audit Metadata
Risk Level
SAFE
Analyzed
May 17, 2026, 03:24 PM