package-redis-blue
Pass
Audited by Gen Agent Trust Hub on Sep 12, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill's primary launcher downloads its execution logic and library dependencies from the vendor's official GitHub repositories.
- Evidence: The
bluescript specifies dependencies hosted atgithub.com/getcolors/redis.git,github.com/getcolors/blue.git, andgithub.com/getcolors/colors-compute.git, each pinned to a specific commit hash for integrity. - [COMMAND_EXECUTION]: The skill utilizes several standard command-line utilities to perform infrastructure provisioning and secure remote access.
- Evidence: The launcher script uses
uv runto execute its logic. The skill also documents the use ofsshfor creating tunnels andredis-clifor verifying server connectivity. - [CREDENTIALS_UNSAFE]: The skill manages authentication for multiple cloud providers via environment variables.
- Evidence:
SKILL.mdandreferences/configuration.mddescribe the use ofCOLORS_PAR_*variables for API keys and tokens. The instructions explicitly direct users to store these credentials in a gitignored.envrc.privatefile, which is a standard best practice for avoiding accidental secret disclosure.
Audit Metadata