olares-publish
Pass
Audited by Gen Agent Trust Hub on Jun 19, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill provides instructions and examples for using CLI tools such as
olares-clianddid-cli. These are standard developer tools for the Olares platform and are used to package charts and manage decentralized IDs. - [EXTERNAL_DOWNLOADS]: The skill references the installation of the
@beclab/olaresidpackage from the NPM registry. This is a vendor-owned package from 'beclab' used for identity management within the ecosystem. - [PROMPT_INJECTION]: The skill includes 'Agent Boundaries' sections that serve as safety guardrails. These instructions explicitly forbid the agent from performing high-risk actions such as handling wallet mnemonics, accessing RSA private keys, or opening GitHub Pull Requests without user consent.
- [CREDENTIALS_UNSAFE]: While the documentation mentions sensitive items like
rsa-private.pemand wallet mnemonics, it does so to warn the user about their sensitivity and provides instructions for the user to handle them locally. It uses safe placeholders like<your mnemonic>for documentation purposes and instructs the agent to avoid these secrets.
Audit Metadata