walkthrough
Pass
Audited by Gen Agent Trust Hub on Jun 13, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCREDENTIALS_UNSAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill executes local
gitcommands to resolve branch references and list modified files in the repository. It also uses standard operating system utilities such asopen,start, orxdg-opento launch the Command Center application or open the generated walkthrough in a web browser. - [EXTERNAL_DOWNLOADS]: When the Command Center application is not detected locally, the skill uses
npxto download the@command-center/command-centerpackage from the official npm registry. - [REMOTE_CODE_EXECUTION]: The skill initiates the execution of the
@command-center/command-centerpackage vianpx, which involves downloading and running code from a remote registry at runtime to provide the backend functionality. - [CREDENTIALS_UNSAFE]: The skill reads a local session token from the user's home directory (
~/.commandcenter/global/session-token.json) to authenticate its tRPC requests to the Command Center backend. This access is limited to the application's own configuration data.
Audit Metadata