dev-env-audit
Pass
Audited by Gen Agent Trust Hub on Jul 20, 2026
Risk Level: SAFE
Full Analysis
- [DATA_EXPOSURE]: The skill accesses local shell configuration files (e.g.,
~/.zshrc,~/.zprofile,~/.bashrc) and environment variables to identify version manager initialization and PATH configuration. This is necessary for the stated purpose of auditing the developer environment. The skill instructions explicitly direct the agent to redact any identified credentials (keys, tokens, or passwords) in the output. - [EXTERNAL_DOWNLOADS]: The skill generates a report containing commands for the user to install or migrate to recommended toolchains. These commands include scripts downloaded from well-known or trusted sources such as Vercel (fnm), Astral (uv), Microsoft (vcpkg), and official language installers (Rust, Julia, SDKMAN). The skill instructions prohibit the agent from executing these downloads itself.
- [COMMAND_EXECUTION]: The skill executes local system commands and utility scripts to probe the state of installed SDKs and shell environments. These operations are read-only probes (e.g.,
which,ls,grep,brew list) and do not modify the system configuration.
Audit Metadata