asosuite
Pass
Audited by Gen Agent Trust Hub on Jun 9, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a standard wrapper for the official ASO Suite CLI and does not exhibit any malicious patterns.
- [CREDENTIALS_UNSAFE]: No hardcoded secrets were detected. Authentication is handled via a secure device flow, and tokens are stored in the user's home directory at ~/.asosuite/config.json with restricted filesystem permissions (0600).
- [COMMAND_EXECUTION]: Shell command usage is limited to opening the system browser for authentication using the standard OS utilities (open, start, xdg-open) and executing the tool's own CLI commands.
- [DATA_EXFILTRATION]: Network communication is limited to the vendor's official API and web domains (asosuite.com and server.asosuite.com). The tool does not access sensitive local files or credentials outside of its own configuration.
- [EXTERNAL_DOWNLOADS]: The skill installs the asosuite package from the public npm registry as part of its setup process.
Audit Metadata