cloud-weaver-pre-flight-check
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONDATA_EXFILTRATIONPERSISTENCE
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill implements an automated update mechanism that fetches version metadata from the vendor's official GitHub repository (
fagnerlopes/cloud-weaver) and automatically executesnpx -y skills updateif a newer version is available. This facilitates the execution of updated code retrieved from a remote registry at runtime. - [COMMAND_EXECUTION]: The bundled preflight scripts (Python and Bash) execute multiple shell commands to validate the environment and manage the development workflow. These include tool presence checks (
gh,ssh), authentication status checks, and a suite ofgitcommands for repository management. - [DATA_EXPOSURE]: The "Sensitive File Guard" feature utilizes regular expressions to scan the local project directory for files likely to contain secrets, including
.envvariations, SSH private keys (id_rsa, etc.),.npmrcfiles, and JSON/YAML files containing credentials. This logic is used to alert the user and block execution if unignored secrets are detected. - [PERSISTENCE]: The "Git Sync" feature automatically performs
git add,git commit,git pull, andgit pushoperations. This effectively persists the current local state of the environment to a remote repository at the start of each session.
Audit Metadata