wizard
Pass
Audited by Gen Agent Trust Hub on Aug 18, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill generates and instructs the user to execute bash scripts. These scripts leverage standard system tools (e.g.,
xdg-open,ghCLI) to perform actions like opening URLs and managing repository configuration. The instructions recommend static verification and the use of ShellCheck before execution. - [DATA_EXPOSURE]: The generated scripts are designed to process credentials such as API keys. The
template.shlibrary implements security-conscious helpers likeask_secret, which suppresses terminal echo during input, and directs persisted secrets to local.envfiles or authenticated GitHub Secret storage. - [SAFE]: The skill references Stripe as a legitimate example of a third-party service setup. The behavior is consistent with the stated purpose of infrastructure provisioning and environment setup, with no detection of obfuscation or unauthorized network exfiltration.
Audit Metadata