cube-wizard

Pass

Audited by Gen Agent Trust Hub on May 11, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill implements a robust security posture by enforcing the "Iron Rule," which mandates that all card data must be verified against official Scryfall oracle text rather than relying on potentially poisoned training data.
  • [SAFE]: Network operations are limited to reputable Magic: The Gathering community services, specifically Scryfall for card metadata and CubeCobra for cube list imports.
  • [SAFE]: Dependency management is handled via the standard uv tool, and the project relies on well-known, high-reputation libraries such as requests and click.
  • [SAFE]: The skill uses local CLI tools mapped to the mtg_utils package for complex logic, minimizing the risk of arbitrary code execution through the main agent prompt.
  • [SAFE]: No instances of obfuscation, hardcoded credentials, or persistence mechanisms were detected in the instructions or configuration files.
Audit Metadata
Risk Level
SAFE
Analyzed
May 11, 2026, 01:50 PM