wizard
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill generates and executes bash scripts that interact with the local filesystem (reading/writing
.envfiles) and external CLI tools (GitHubghCLI). These operations are the primary function of the skill and are performed with explicit user confirmation and interaction. - [CREDENTIALS_SAFE]: The
template.shprovides aask_secretfunction that usesread -rsto hide terminal input when sensitive values are entered. It also correctly distinguishes between local.envstorage and CI storage viagh secret set. - [EXTERNAL_DOWNLOADS]: The skill uses
open_urlto direct users to legitimate service dashboards (like Stripe) in their local browser. This is a safe interaction pattern as it relies on the user's existing authenticated browser session and does not download or execute remote scripts.
Audit Metadata