pair-agent
Pass
Audited by Gen Agent Trust Hub on Jun 14, 2026
Risk Level: SAFEREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [REMOTE_CODE_EXECUTION]: Downloads and executes the Bun installation script from the official source
https://bun.sh/install. - The installation logic incorporates a security best practice by calculating the SHA-256 checksum of the downloaded file and comparing it against a hardcoded value (
bab8acfb046aac8c72407bdcce903957665d655d7acaa3e11c7c4616beae68dd) before executing the script withbash. - [COMMAND_EXECUTION]: Executes several local binaries and scripts located in the skill's directory for environment configuration and session management.
- These utilities include
gstack-slug,gstack-config, andgstack-team-init, which are used to manage project-specific routing and state. - Includes an
evalstatement to process output from thegstack-slugutility for environment variable management. - [EXTERNAL_DOWNLOADS]: Coordinates the installation and authentication of
ngrokto enable secure remote tunneling. - The skill provides guided instructions and command execution to set up
ngrokwhen a remote agent pairing is requested by the user, utilizing official service endpoints.
Audit Metadata