Skills
skills/code-yeongyu/oh-my-opencode/programming/Gen Agent Trust Hub

programming

Pass

Audited by Gen Agent Trust Hub on Jul 19, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: Scaffolding scripts located in scripts/python/, scripts/rust/, and scripts/go/ execute system commands to initialize project environments.
  • For example, scripts/python/new-project.py calls uv init and uv add to set up Python projects.
  • scripts/rust/new-project.py executes cargo init to bootstrap Rust projects.
  • These commands are legitimate architectural components used solely for project initialization and do not ingest untrusted user input into shell execution.
  • [EXTERNAL_DOWNLOADS]: Several automation scripts (e.g., scripts/go/new-project.py, scripts/python/new-project.py) include instructional comment blocks that describe how to install the uv tool using a remote script from astral.sh (curl -LsSf https://astral.sh/uv/install.sh | sh).
  • These are standard installation instructions for a well-known development tool from its official and established source.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 19, 2026, 05:10 AM
Security Audit — agent-trust-hub — programming