package-airflow-green
Pass
Audited by Gen Agent Trust Hub on Sep 12, 2026
Risk Level: SAFEREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The
greenlauncher script dynamically fetches its core dependencies from the author's GitHub repositories (github.com/getcolors/airflow.git,github.com/getcolors/once.git, andgithub.com/getcolors/green.git) at runtime using thebabashka.depsutility. These resources are identified as vendor-owned and are pinned to specific commit SHAs. - [DYNAMIC_EXECUTION]: The skill utilizes dynamic library loading through Clojure's
add-depsandrequiring-resolvemechanisms to resolve and load internal CLI logic during the bootstrap process. - [COMMAND_EXECUTION]: The skill manages infrastructure lifecycle by invoking external command-line tools, including OpenTofu for state management, Ansible for remote configuration, and the GitHub CLI (
gh) for repository and secret management. - [SAFE]: The skill incorporates defensive guidelines for the AI agent, such as requiring explicit human approval for destructive operations like
deleteand strictly prohibiting the hardcoding or display of sensitive credentials like API tokens or Fernet keys in chat or configuration files.
Audit Metadata