setup-env
Pass
Audited by Gen Agent Trust Hub on Oct 28, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill's setup script (
scripts/setup-env.mjs) usesexecFileSyncto run system utilities likewhich(on Linux/macOS) andwhere(on Windows) to detect the presence of developer tools (e.g.,cargo-nextest,sccache) and agent CLI binaries. - [PERSISTENCE]: While the skill modifies user configuration files (such as
~/.cargo/config.toml,~/.cursor/rules/global.mdc) and creates symbolic links in application-specific directories (e.g.,~/.claude/CLAUDE.md), these actions are the documented primary purpose of the skill to maintain consistent agent behavior across sessions. - [DATA_EXFILTRATION]: No network-enabled commands or operations that could lead to data exfiltration were found. The skill operates entirely on the local file system and does not interact with external endpoints.
- [REMOTE_CODE_EXECUTION]: The skill does not download or execute code from external sources. All logic is contained within the provided local scripts, and file operations are restricted to known configuration paths.
Audit Metadata