package-redis-blue

Pass

Audited by Gen Agent Trust Hub on Sep 12, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill's primary launcher downloads its execution logic and library dependencies from the vendor's official GitHub repositories.
  • Evidence: The blue script specifies dependencies hosted at github.com/getcolors/redis.git, github.com/getcolors/blue.git, and github.com/getcolors/colors-compute.git, each pinned to a specific commit hash for integrity.
  • [COMMAND_EXECUTION]: The skill utilizes several standard command-line utilities to perform infrastructure provisioning and secure remote access.
  • Evidence: The launcher script uses uv run to execute its logic. The skill also documents the use of ssh for creating tunnels and redis-cli for verifying server connectivity.
  • [CREDENTIALS_UNSAFE]: The skill manages authentication for multiple cloud providers via environment variables.
  • Evidence: SKILL.md and references/configuration.md describe the use of COLORS_PAR_* variables for API keys and tokens. The instructions explicitly direct users to store these credentials in a gitignored .envrc.private file, which is a standard best practice for avoiding accidental secret disclosure.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 12, 2026, 01:14 PM