ecosystem-orchestration

Pass

Audited by Gen Agent Trust Hub on Sep 25, 2026

Risk Level: SAFECOMMAND_EXECUTION

Full Analysis

[COMMAND_EXECUTION]: The script scripts/install_all.py uses subprocess.run to execute installation commands for other skills. Although it enables shell=True for compatibility on Windows environments, the command arguments are derived from a static, hardcoded list of skill names, which effectively mitigates the risk of arbitrary command injection from user input.

Audit Metadata

Risk Level

SAFE

Analyzed

Sep 25, 2026, 10:51 PM