adk-setup
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- Remote Script Execution: The skill includes an instruction to download and execute the uv installation script from astral.sh using the curl piped to shell pattern. While this is the official installation method for the tool, executing remote scripts is a security consideration.
- External Tool Installation: It uses go install to fetch the addlicense tool from a repository managed by a trusted organization. This is a routine part of the project's compliance and formatting setup.
- Command Execution for Environment Setup: The skill executes several commands to manage virtual environments, synchronize dependencies, and install developer tools using uv. These operations are consistent with setting up a local development environment.
- Git Hook Installation: The command pre-commit install is used to set up git hooks for automated linting and formatting, which is a standard practice for maintaining code quality.
Audit Metadata