harness-download

Pass

Audited by Gen Agent Trust Hub on Sep 7, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill downloads the Harness Anything source code from the author's GitHub repository (https://github.com/FairladyZ625/harness-anything.git) using the git clone command.
  • [REMOTE_CODE_EXECUTION]: The skill executes JavaScript files directly from the downloaded source code, specifically tools/sync-runtime-skills.mjs and packages/cli/src/index.ts, using the node runtime to perform synchronization and verification.
  • [COMMAND_EXECUTION]: Utilizes system commands including git, node, and npm for environment verification and dependency installation via npm ci.
  • [EXTERNAL_DOWNLOADS]: References official resources from trusted and well-known providers such as Vercel Labs and Bun for implementation guidelines and tooling.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 7, 2026, 02:34 PM
Security Audit — agent-trust-hub — harness-download