clipboard-transformer-rules

Pass

Audited by Gen Agent Trust Hub on Jul 29, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The instructions direct the agent to use the clipboard-transformer CLI and cargo to locate configurations, validate rules, and perform transformations.
  • [EXTERNAL_DOWNLOADS]: Documentation in references/imports.md and references/plugins.md describes the ability to import rules and install WASM plugins from remote sources, including well-known services like GitHub, GitLab, and Bitbucket.
  • [REMOTE_CODE_EXECUTION]: The skill documents support for shell rules and WASM plugins, which allow for the execution of arbitrary logic. It includes explicit security guidelines, instructing the agent never to weaken SHA-256 pins or enable shell execution/permissions without express user authorization.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 29, 2026, 01:20 AM
Security Audit — agent-trust-hub — clipboard-transformer-rules