Skills
Navigate
skills/finpeakinc/frevana-skills/site-data-collector/Gen Agent Trust Hub

site-data-collector

Pass

Audited by Gen Agent Trust Hub on Jul 24, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The scripts/setup.sh script downloads a setup file from the vendor's repository at https://raw.githubusercontent.com/FinpeakInc/frevana-cli-releases/refs/heads/main/skills/frevana/scripts/setup.sh.- [REMOTE_CODE_EXECUTION]: The downloaded setup script is executed via bash to install the Frevana environment. This follows the vendor's documented installation process.- [COMMAND_EXECUTION]: Both scripts/extract_links.py and scripts/generate_collector.sh utilize subprocess or direct shell execution to call the frevana CLI binary for data fetching and script generation tasks.- [SAFE]: The Python extraction script incorporates security measures against CSV injection by sanitizing potentially dangerous starting characters in data cells before writing to the output file.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 24, 2026, 01:31 AM
Security Audit — agent-trust-hub — site-data-collector