skills/carnaverone/skills/wizard/Gen Agent Trust Hub

wizard

Pass

Audited by Gen Agent Trust Hub on Sep 7, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill generates bash scripts intended to be executed by a human user. The template.sh uses standard commands like grep, read, printf, and touch. While it executes commands, they are transparently used for environmental configuration (e.g., writing to .env or using the gh CLI) as part of its primary purpose.
  • [CREDENTIALS_SAFE]: The skill provides explicit instructions to use ask_secret for sensitive values and uses read -rs to prevent secrets from being echoed to the terminal during input. This follows security best practices for handling sensitive data in scripts.
  • [EXTERNAL_DOWNLOADS]: The skill mentions opening URLs for third-party services like Stripe in the user's browser via tools like xdg-open or open. These are static, well-known service URLs and do not involve downloading or executing remote code.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 7, 2026, 10:09 PM
Security Audit — agent-trust-hub — wizard