verifier-installer

Pass

Audited by Gen Agent Trust Hub on Oct 13, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses subprocess.run to execute local development tools such as pytest, npm, go, and cargo to verify that the newly installed test loops are functional.
  • [COMMAND_EXECUTION]: A helper script, contract_check.py, uses subprocess.run to call git for branch and worktree verification and python to probe interpreter versions.
  • [SAFE]: The skill implements a robust "autonomy grant" system via contract_check.py, ensuring that no modifications are made to the user's repository without explicit prior approval or a valid, time-limited cryptographic grant.
  • [SAFE]: All external downloads and configurations target official, well-known services such as GitHub Actions and standard package registries (NPM, PyPI).
  • [SAFE]: The detect_stack.py script performs read-only analysis of local project files (e.g., package.json, pyproject.toml) and does not perform any network operations or write actions.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 13, 2026, 10:41 AM