setup
Pass
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: SAFEREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADSPERSISTENCE
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill provides instructions to install the
uvtool by piping a shell script fromhttps://astral.sh/uv/install.shtosh. This is the official installation method for a well-known Python package manager. - [EXTERNAL_DOWNLOADS]: The skill automates the download and installation of various official agent skills and project templates using
npxfrom well-known organizations including Remotion, ElevenLabs, and Replicate. - [PERSISTENCE]: The instructions guide the user to manually append environment variables (API keys) to their shell configuration files (
~/.zshrcor~/.bashrc). This is a standard and safe procedure for persisting developer credentials in a local environment.
Audit Metadata