cy-carousel
Pass
Audited by Gen Agent Trust Hub on Oct 10, 2026
Risk Level: SAFEDYNAMIC_EXECUTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [DYNAMIC_EXECUTION]: The script
scripts/手排.pyincludes logic to compile local Swift source code files (ocrfind.swiftandemoji.swift) into executable binaries within a localbin/directory. - This compilation is triggered at runtime on macOS systems when the corresponding OCR or emoji rendering features are first used.
- [COMMAND_EXECUTION]: Multiple Python scripts, such as
scripts/手排.py,scripts/对照.py, andscripts/图像等比.py, utilize thesubprocess.run()function to execute shell commands. - These calls are used to invoke the
swiftccompiler or to run the resulting specialized image-processing binaries. - [EXTERNAL_DOWNLOADS]: The script
tools/submit_feedback.pyusesurllib.requestto communicate with the GitHub API (api.github.com). - This is part of the skill's documented feedback mechanism, allowing users to submit feedback to the author's repository using a personal access token.
Audit Metadata