upgrade-fab-provider

Pass

Audited by Gen Agent Trust Hub on Jul 15, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses uv and prek to manage environment synchronization, dependency locking, and asset compilation. These commands are restricted to the local development environment and target the repository's own configuration.
  • [EXTERNAL_DOWNLOADS]: Resolves the target version by querying the official PyPI JSON API and references release notes on GitHub. Both sources are well-known and trusted technology services.
  • [DATA_EXFILTRATION]: No exfiltration patterns detected. The skill reads local configuration files (pyproject.toml, Dockerfile.ci) and documentation to ensure internal version consistency during the upgrade process.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 15, 2026, 04:21 AM
Security Audit — agent-trust-hub — upgrade-fab-provider