install-hve-core-rpiv
Pass
Audited by Gen Agent Trust Hub on Jun 22, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches workflow assets, including prompts and agent configurations, from Microsoft's official GitHub repository (
microsoft/hve-core). - [COMMAND_EXECUTION]: Utilizes local developer tools such as GitHub CLI (
gh) andgitto perform source acquisition, resolve commit hashes, and manage temporary file caches. - [SAFE]: Implements strict validation checks including path normalization to prevent traversal attacks and uses a manifest-based tracking system to identify and prevent unauthorized drift or unmanaged file collisions.
- [SAFE]: Includes explicit instructions to sanitize generated content, ensuring that dangerous or privileged agent-level configuration keys are not carried over from source files into the local projections.
Audit Metadata