hummingbot-developer
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONCREDENTIALS_UNSAFEPRIVILEGE_ESCALATION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill fetches and executes setup scripts from official domains of well-known services, including Homebrew, nvm, and Docker, to automate the installation of developer prerequisites.
- [EXTERNAL_DOWNLOADS]: Downloads the Miniconda environment manager from Anaconda's official repository for project dependency isolation.
- [CREDENTIALS_UNSAFE]: Sets up local development configuration files with default administrative credentials (e.g., 'admin', 'password') for infrastructure services like EMQX and PostgreSQL.
- [COMMAND_EXECUTION]: Orchestrates the development stack by executing shell scripts and commands for repository management, build processes, and service status checks.
- [PRIVILEGE_ESCALATION]: Modifies system group memberships using
sudo usermodto allow the user to run Docker commands without root privileges, which is a standard procedure for Docker environment setup.
Audit Metadata