wizard
Pass
Audited by Gen Agent Trust Hub on Sep 7, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill generates bash scripts intended to be executed by a human user. The
template.shuses standard commands likegrep,read,printf, andtouch. While it executes commands, they are transparently used for environmental configuration (e.g., writing to.envor using theghCLI) as part of its primary purpose. - [CREDENTIALS_SAFE]: The skill provides explicit instructions to use
ask_secretfor sensitive values and usesread -rsto prevent secrets from being echoed to the terminal during input. This follows security best practices for handling sensitive data in scripts. - [EXTERNAL_DOWNLOADS]: The skill mentions opening URLs for third-party services like Stripe in the user's browser via tools like
xdg-openoropen. These are static, well-known service URLs and do not involve downloading or executing remote code.
Audit Metadata