package-redis-operator-red
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: The
redscript dynamically resolves and installs dependencies from official GitHub repositories under thegetcolorsorganization usingbun installif they are not already present in the local environment. - Evidence:
PINSconstant inredfile pointing togithub:getcolors/redis-operator,github:getcolors/colors-compute, andgithub:getcolors/red. - [COMMAND_EXECUTION]: The skill executes various lifecycle commands for the Redis operator, including rendering manifests, creating resources, and running diagnostic checks via a custom launcher script.
- Evidence: Commands such as
./red build,./red create, and./red checkdocumented inSKILL.md. - [SAFE]: The skill explicitly instructs users to manage secrets using environment variables (
COLORS_PAR_*) and an ignored.envrc.privatefile, which is a standard security practice to prevent credential exposure. - Evidence: Instructions in
SKILL.mdregardingCOLORS_PAR_*usage.
Audit Metadata