setup
Pass
Audited by Gen Agent Trust Hub on Mar 29, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads the 'dasel' binary from GitHub Releases, a well-known and trusted service. The process is documented to include SHA256 verification against API responses to ensure the integrity of the downloaded file.
- [COMMAND_EXECUTION]: Executes an internal Python script ('install_dasel.py') to manage platform-specific installation tasks, such as directory creation and binary permission management.
- [COMMAND_EXECUTION]: Modifies shell profile configuration files ('
/.bashrc' or '/.zshrc') to append the installation directory to the PATH variable. This persistence mechanism is consistent with the primary purpose of a command-line tool installer.
Audit Metadata