fit-universe

Pass

Audited by Gen Agent Trust Hub on Mar 28, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill documents standard CLI operations using npx, make, and shell scripts (scripts/env.sh) to execute the data generation pipeline and associated verification tasks. These commands are typical for a developer-oriented CLI tool and are used within the scope of its defined functionality.- [EXTERNAL_DOWNLOADS]: The documentation references the use of sdv (Python) and Synthea (Java/JAR) for dataset generation. These are recognized, legitimate tools for synthetic data creation. The use of npx to run the vendor's own CLI (fit-universe) is a standard deployment method.- [CREDENTIALS_UNSAFE]: The skill refers to LLM_TOKEN and LLM_BASE_URL for LLM-based prose generation. These credentials are managed through environment variables and a configuration script, which is a standard security practice for avoiding hardcoded secrets.- [DATA_EXPOSURE_AND_EXFILTRATION]: The skill includes a --load flag for uploading generated documents to Supabase Storage. This is documented as a core feature for distributing the synthetic data within the vendor's infrastructure.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 28, 2026, 03:33 PM
Security Audit — agent-trust-hub — fit-universe