walkthrough

Pass

Audited by Gen Agent Trust Hub on Jun 13, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCREDENTIALS_UNSAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes local git commands to resolve branch references and list modified files in the repository. It also uses standard operating system utilities such as open, start, or xdg-open to launch the Command Center application or open the generated walkthrough in a web browser.
  • [EXTERNAL_DOWNLOADS]: When the Command Center application is not detected locally, the skill uses npx to download the @command-center/command-center package from the official npm registry.
  • [REMOTE_CODE_EXECUTION]: The skill initiates the execution of the @command-center/command-center package via npx, which involves downloading and running code from a remote registry at runtime to provide the backend functionality.
  • [CREDENTIALS_UNSAFE]: The skill reads a local session token from the user's home directory (~/.commandcenter/global/session-token.json) to authenticate its tRPC requests to the Command Center backend. This access is limited to the application's own configuration data.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 13, 2026, 12:10 AM
Security Audit — agent-trust-hub — walkthrough