fleet-report
Pass
Audited by Gen Agent Trust Hub on Aug 15, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill executes a local TypeScript script (
fleet-report.ts) using thebunruntime environment. The script is located within the installation path associated with the vendor, 'arcblock'. - Evidence:
bun "${AGENTLOOP_ROOT:-$HOME/.claude/plugins/marketplaces/arcblock-agent-skills/plugins/agentloop}/scripts/fleet-report.ts" $ARGS - [SAFE]: The instructions explicitly define a 'one rule' policy to prevent the agent from estimating or deriving numbers, ensuring that all reported data comes directly from the trusted script output.
- [SAFE]: The use of the
opentool is restricted to viewing a locally generated HTML dashboard in/tmp/fleet-report.html, which is a standard reporting function. - [SAFE]: No evidence of credential exposure, external network exfiltration, or persistence mechanisms was found in the provided file.
Audit Metadata