agentic-ecology-init

Pass

Audited by Gen Agent Trust Hub on Sep 2, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses shell commands to bootstrap the local project, including initializing the environment with uv init, creating a standardized directory structure (mkdir), and removing placeholder files (rm).
  • [EXTERNAL_DOWNLOADS]: Fetches and installs additional agent skills from official namespaces (including google-deepmind, googlecolab, and googleworkspace) via the npx skills add command.
  • [EXTERNAL_DOWNLOADS]: Accesses the official npm registry (registry.npmjs.org) using curl to retrieve metadata used to identify configuration parameters.
  • [COMMAND_EXECUTION]: Manages Python dependencies and environment synchronization through the uv tool, including installing packages from a reference pyproject.toml that points to official repositories.
  • [COMMAND_EXECUTION]: Includes a verification script (verify_env.py) designed to be executed via uv run python to confirm the environment is correctly configured and free of library deadlocks.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 2, 2026, 06:58 PM
Security Audit — agent-trust-hub — agentic-ecology-init