package-dotfiles-green
Pass
Audited by Gen Agent Trust Hub on Aug 23, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The launcher script 'green' downloads implementation logic from the vendor's official repositories on GitHub.
- [REMOTE_CODE_EXECUTION]: The script uses Babashka's dependency resolution to fetch and execute Clojure code from a remote Git repository at runtime, which is pinned to a specific commit hash for security.
- [COMMAND_EXECUTION]: The tool executes filesystem operations to install dotfiles, incorporating safety guards such as a mandatory environment variable to authorize overwriting existing local files.
Audit Metadata