wizard
Pass
Audited by Gen Agent Trust Hub on Jul 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill authors bash scripts, modifies file permissions via
chmod +x, and validates script syntax usingbash -nandshellcheck. - [DATA_EXFILTRATION]: The skill collects user-provided secrets (e.g., API keys) and stores them in local
.envfiles or GitHub Secrets. It usesread -rsfor secret entry to ensure credentials are not visible in terminal history. - [EXTERNAL_DOWNLOADS]: The generated scripts interface with GitHub via the
ghcommand-line tool to manage repository secrets and variables. - [SAFE]: The skill emphasizes human-in-the-loop verification, requiring users to confirm the procedure scope and individual steps before execution.
Audit Metadata