formal-modeling

Pass

Audited by Gen Agent Trust Hub on Aug 20, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill provides instructions in references/alloy/setup.md to download the Alloy analyzer JAR file from the official GitHub releases page of the AlloyTools project.
  • Evidence: https://github.com/AlloyTools/org.alloytools.alloy/releases/download/v6.2.0/org.alloytools.alloy.dist.jar downloaded via curl.
  • [COMMAND_EXECUTION]: The documentation includes standard shell commands for environment setup and tool execution, which are intended for the user to follow.
  • Evidence: Commands such as brew install openjdk@21, java -jar alloy.jar, and uv run --with hypothesis pytest test_matching.py are used for development and testing workflows.
  • [SAFE]: The skill is entirely educational and documentation-focused. It does not include any obfuscated code, hidden instructions, data exfiltration mechanisms, or privilege escalation attempts. The external resources referenced are official repositories and documentation for well-known formal methods software.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 20, 2026, 02:35 PM