package-redis-operator-red

Pass

Audited by Gen Agent Trust Hub on Sep 16, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The red script dynamically resolves and installs dependencies from official GitHub repositories under the getcolors organization using bun install if they are not already present in the local environment.
  • Evidence: PINS constant in red file pointing to github:getcolors/redis-operator, github:getcolors/colors-compute, and github:getcolors/red.
  • [COMMAND_EXECUTION]: The skill executes various lifecycle commands for the Redis operator, including rendering manifests, creating resources, and running diagnostic checks via a custom launcher script.
  • Evidence: Commands such as ./red build, ./red create, and ./red check documented in SKILL.md.
  • [SAFE]: The skill explicitly instructs users to manage secrets using environment variables (COLORS_PAR_*) and an ignored .envrc.private file, which is a standard security practice to prevent credential exposure.
  • Evidence: Instructions in SKILL.md regarding COLORS_PAR_* usage.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 16, 2026, 02:44 PM