verifier-installer
Pass
Audited by Gen Agent Trust Hub on Oct 13, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
subprocess.runto execute local development tools such aspytest,npm,go, andcargoto verify that the newly installed test loops are functional. - [COMMAND_EXECUTION]: A helper script,
contract_check.py, usessubprocess.runto callgitfor branch and worktree verification andpythonto probe interpreter versions. - [SAFE]: The skill implements a robust "autonomy grant" system via
contract_check.py, ensuring that no modifications are made to the user's repository without explicit prior approval or a valid, time-limited cryptographic grant. - [SAFE]: All external downloads and configurations target official, well-known services such as GitHub Actions and standard package registries (NPM, PyPI).
- [SAFE]: The
detect_stack.pyscript performs read-only analysis of local project files (e.g.,package.json,pyproject.toml) and does not perform any network operations or write actions.
Audit Metadata