atmos-vendoring

Pass

Audited by Gen Agent Trust Hub on Sep 20, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill describes functionality for downloading infrastructure components from external sources, including GitHub, OCI-compatible registries (ECR, GHCR, Docker Hub), Amazon S3, and Google Cloud Storage. All examples point to well-known services or the vendor's own repositories.
  • [COMMAND_EXECUTION]: Documentation is provided for the atmos vendor CLI command suite, which allows users to pull, update, and clean vendored components. These commands operate within the local project structure to manage dependencies.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 20, 2026, 07:19 AM
Security Audit — agent-trust-hub — atmos-vendoring