hdr-dynmeta-docs

Pass

Audited by Gen Agent Trust Hub on Jun 27, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill downloads README files and release metadata from github.com, raw.githubusercontent.com, and api.github.com. These are well-known services and the downloads are targeted at specific, relevant repositories.
  • [COMMAND_EXECUTION]: The skill executes a provided Python script (scripts/hdrdocs.py) to facilitate documentation searching and fetching. The script uses only the Python standard library.
  • [CREDENTIALS_UNSAFE]: The skill instructions and script support the use of a GITHUB_TOKEN environment variable to authenticate API requests. This is a standard practice to manage rate limits and does not involve hardcoding secrets.
  • [DATA_EXPOSURE]: The script maintains a local cache of fetched documentation in ~/.cache/hdr-dynmeta-docs/. This is standard behavior for a CLI tool to improve performance and provide offline access.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 27, 2026, 09:54 AM
Security Audit — agent-trust-hub — hdr-dynmeta-docs