Skills
skills/cristoslc/swain/swain-keys/Gen Agent Trust Hub

swain-keys

Pass

Audited by Gen Agent Trust Hub on May 8, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATION
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes standard system utilities including ssh-keygen to generate ed25519 keys, git for repository configuration and remote management, and ssh for connectivity verification.
  • [EXTERNAL_DOWNLOADS]: Interacts with GitHub's infrastructure via the gh CLI to register public keys (authentication and signing types) and verify commit signing status through the GitHub API.
  • [DATA_EXFILTRATION]: While the skill manages cryptographic material, it only transmits public keys to GitHub for registration. Private keys are generated locally and stored securely in the user's ~/.ssh/ directory without being transmitted over the network.
Audit Metadata
Risk Level
SAFE
Analyzed
May 8, 2026, 04:12 AM
Security Audit — agent-trust-hub — swain-keys