install-hve-core-rpiv

Pass

Audited by Gen Agent Trust Hub on Jun 22, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: Fetches workflow assets, including prompts and agent configurations, from Microsoft's official GitHub repository (microsoft/hve-core).
  • [COMMAND_EXECUTION]: Utilizes local developer tools such as GitHub CLI (gh) and git to perform source acquisition, resolve commit hashes, and manage temporary file caches.
  • [SAFE]: Implements strict validation checks including path normalization to prevent traversal attacks and uses a manifest-based tracking system to identify and prevent unauthorized drift or unmanaged file collisions.
  • [SAFE]: Includes explicit instructions to sanitize generated content, ensuring that dangerous or privileged agent-level configuration keys are not carried over from source files into the local projections.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 22, 2026, 04:52 AM
Security Audit — agent-trust-hub — install-hve-core-rpiv