create-harness-spec
Pass
Audited by Gen Agent Trust Hub on Sep 3, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references and fetches resources from the hedera-dev GitHub organization (e.g.,
github.com/hedera-dev/hedera-harness). These are vendor-owned resources and are considered safe. - [COMMAND_EXECUTION]: The skill provides instructions to run several shell commands including
npm root -g,cp,bash, andhedera-harness. These commands are used for standard initialization, template copying, and validation of project files within the local environment. - [DYNAMIC_EXECUTION]: The skill includes a step to execute a remote-style check script via
bash <path-to>/harness-spec-anatomy/scripts/check-spec.sh. The script path points to a local companion directory from the same vendor, which is a standard part of this skill's architecture.
Audit Metadata