instrumentation

Pass

Audited by Gen Agent Trust Hub on Aug 29, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADS
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill performs a version check by querying a remote API (https://foundry.thehorizonfoundry.com/api/version). This is documented as a standard practice for the suite, includes a user opt-out mechanism via environment variables, and follows a strict non-blocking execution pattern.
  • [COMMAND_EXECUTION]: The skill contains a shell script for the version check. The command is restricted to checking for updates, implements rate-limiting via a local stamp file, and is designed to fail silently without affecting the agent's primary tasks.
  • [DATA_EXPOSURE]: The version check transmits the skill name and its current version to the vendor's API. This is disclosed in the 'Version check' section and does not include user, machine, or environment-specific identifiers.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 29, 2026, 11:44 AM
Security Audit — agent-trust-hub — instrumentation