fit-universe
Pass
Audited by Gen Agent Trust Hub on Mar 28, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill documents standard CLI operations using
npx,make, and shell scripts (scripts/env.sh) to execute the data generation pipeline and associated verification tasks. These commands are typical for a developer-oriented CLI tool and are used within the scope of its defined functionality.- [EXTERNAL_DOWNLOADS]: The documentation references the use ofsdv(Python) andSynthea(Java/JAR) for dataset generation. These are recognized, legitimate tools for synthetic data creation. The use ofnpxto run the vendor's own CLI (fit-universe) is a standard deployment method.- [CREDENTIALS_UNSAFE]: The skill refers toLLM_TOKENandLLM_BASE_URLfor LLM-based prose generation. These credentials are managed through environment variables and a configuration script, which is a standard security practice for avoiding hardcoded secrets.- [DATA_EXPOSURE_AND_EXFILTRATION]: The skill includes a--loadflag for uploading generated documents to Supabase Storage. This is documented as a core feature for distributing the synthetic data within the vendor's infrastructure.
Audit Metadata