package-redis-red

Pass

Audited by Gen Agent Trust Hub on Sep 18, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The red launcher script downloads its core library and supporting components from the skill author's (getcolors) GitHub repositories during its initial setup. These resources are pinned to specific git commits to ensure integrity and prevent unauthorized modifications to the execution logic.\n- [COMMAND_EXECUTION]: The skill uses local shell commands, including bun install for dependency management and chmod to set appropriate file permissions. These actions are restricted to the local environment and are standard for CLI tools of this nature.\n- [DYNAMIC_EXECUTION]: The script employs dynamic import() to load its implementation logic from a local cache after verifying its integrity. This approach allows the launcher to resolve its pinned core code dynamically while maintaining a lightweight footprint.\n- [DATA_EXPOSURE]: The skill modifies the local ~/.ssh/config file to facilitate SSH tunneling to the managed Redis instances. It also utilizes environment variables for all sensitive cloud provider credentials, adhering to standard practices for secret management in automation workflows.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 18, 2026, 08:20 AM