pair-agent

Pass

Audited by Gen Agent Trust Hub on Jun 14, 2026

Risk Level: SAFEREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [REMOTE_CODE_EXECUTION]: Downloads and executes the Bun installation script from the official source https://bun.sh/install.
  • The installation logic incorporates a security best practice by calculating the SHA-256 checksum of the downloaded file and comparing it against a hardcoded value (bab8acfb046aac8c72407bdcce903957665d655d7acaa3e11c7c4616beae68dd) before executing the script with bash.
  • [COMMAND_EXECUTION]: Executes several local binaries and scripts located in the skill's directory for environment configuration and session management.
  • These utilities include gstack-slug, gstack-config, and gstack-team-init, which are used to manage project-specific routing and state.
  • Includes an eval statement to process output from the gstack-slug utility for environment variable management.
  • [EXTERNAL_DOWNLOADS]: Coordinates the installation and authentication of ngrok to enable secure remote tunneling.
  • The skill provides guided instructions and command execution to set up ngrok when a remote agent pairing is requested by the user, utilizing official service endpoints.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 14, 2026, 08:50 AM
Security Audit — agent-trust-hub — pair-agent