vault
Pass
Audited by Gen Agent Trust Hub on Jun 12, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/vault.pyexecutes local system utilitiesfdesetup statusandage-keygenviasubprocess.runto audit system security status. These calls use argument lists rather than shell strings, preventing command injection. - [DATA_EXFILTRATION]: The skill probes for the presence of security-sensitive files (e.g.,
age.key,keys.txt) and disk mount points. This is conducted locally for the purpose of a configuration audit; no file content is read or transmitted externally. - [SAFE]: The skill operates entirely locally with no network capabilities. It adheres to a non-destructive design where state-changing commands (like key generation) are guarded by explicit flags, and other setup commands are only printed for manual user review and execution.
Audit Metadata