package-redis-red
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The
redlauncher script downloads its core library and supporting components from the skill author's (getcolors) GitHub repositories during its initial setup. These resources are pinned to specific git commits to ensure integrity and prevent unauthorized modifications to the execution logic.\n- [COMMAND_EXECUTION]: The skill uses local shell commands, includingbun installfor dependency management andchmodto set appropriate file permissions. These actions are restricted to the local environment and are standard for CLI tools of this nature.\n- [DYNAMIC_EXECUTION]: The script employs dynamicimport()to load its implementation logic from a local cache after verifying its integrity. This approach allows the launcher to resolve its pinned core code dynamically while maintaining a lightweight footprint.\n- [DATA_EXPOSURE]: The skill modifies the local~/.ssh/configfile to facilitate SSH tunneling to the managed Redis instances. It also utilizes environment variables for all sensitive cloud provider credentials, adhering to standard practices for secret management in automation workflows.
Audit Metadata