artcraft-cli-setup
Pass
Audited by Gen Agent Trust Hub on Oct 14, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads environment runtimes including Node.js and domain-specific CLI tools (VectorCraft, PhotoCraft, EffectCraft, FilmCraft) to facilitate creative tasks.
- [EXTERNAL_DOWNLOADS]: Fetches pre-trained machine learning models (Whisper-tiny) from Hugging Face using specific commit hashes for version pinning and integrity.
- [COMMAND_EXECUTION]: Executes local Python scripts (
bootstrap.py,workflow.py,cli.py) to manage environment setup, task scheduling, and project packaging. - [SAFE]: Implements strict integrity verification by checking SHA-256 digests for downloaded archives, installed binaries, and project assets before execution.
- [SAFE]: Explicitly avoids administrative privileges by instructing the agent not to use
sudoand to operate within user-defined directories. - [SAFE]: All external skill dependencies and CLI tools are sourced from the verified vendor 'full-aigc-skills' or well-known trusted platforms.
Audit Metadata