package-alice-green
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The launcher script 'green' fetches the core 'alice' library from the author's own GitHub repository (github.com/getcolors/alice). This is documented as a vendor-provided resource.- [REMOTE_CODE_EXECUTION]: The script employs dynamic dependency loading using babashka.deps/add-deps to pull and execute functionality from the remote 'alice' library at runtime.- [COMMAND_EXECUTION]: The skill manages local SSH configurations by modifying ~/.ssh/config and executing system commands for infrastructure provisioning, SSH tunneling, and file synchronization via rsync.
Audit Metadata