cube-wizard
Pass
Audited by Gen Agent Trust Hub on May 11, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements a robust security posture by enforcing the "Iron Rule," which mandates that all card data must be verified against official Scryfall oracle text rather than relying on potentially poisoned training data.
- [SAFE]: Network operations are limited to reputable Magic: The Gathering community services, specifically Scryfall for card metadata and CubeCobra for cube list imports.
- [SAFE]: Dependency management is handled via the standard
uvtool, and the project relies on well-known, high-reputation libraries such asrequestsandclick. - [SAFE]: The skill uses local CLI tools mapped to the
mtg_utilspackage for complex logic, minimizing the risk of arbitrary code execution through the main agent prompt. - [SAFE]: No instances of obfuscation, hardcoded credentials, or persistence mechanisms were detected in the instructions or configuration files.
Audit Metadata