formal-modeling
Pass
Audited by Gen Agent Trust Hub on Aug 20, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions in
references/alloy/setup.mdto download the Alloy analyzer JAR file from the official GitHub releases page of the AlloyTools project. - Evidence:
https://github.com/AlloyTools/org.alloytools.alloy/releases/download/v6.2.0/org.alloytools.alloy.dist.jardownloaded viacurl. - [COMMAND_EXECUTION]: The documentation includes standard shell commands for environment setup and tool execution, which are intended for the user to follow.
- Evidence: Commands such as
brew install openjdk@21,java -jar alloy.jar, anduv run --with hypothesis pytest test_matching.pyare used for development and testing workflows. - [SAFE]: The skill is entirely educational and documentation-focused. It does not include any obfuscated code, hidden instructions, data exfiltration mechanisms, or privilege escalation attempts. The external resources referenced are official repositories and documentation for well-known formal methods software.
Audit Metadata