doctor
Pass
Audited by Gen Agent Trust Hub on Sep 3, 2026
Risk Level: SAFECOMMAND_EXECUTIONPRIVILEGE_ESCALATIONDYNAMIC_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill is designed to execute system-level commands to detect installed tools and install missing dependencies. It uses
command -vfor detection and platform-specific package managers (apt,dnf,pacman,winget,scoop,brew) for installation. - [PRIVILEGE_ESCALATION]: The instructions explicitly include
sudocommands for Linux package management (e.g.,sudo apt install texlive-full) and mention that some Windows commands may require Administrator privileges. While these are for legitimate tool installation, they involve elevated permissions. - [DYNAMIC_EXECUTION]: The skill generates and executes Python code at runtime using a heredoc (`python3
- <<'PYEOF'
) to check for the presence and versions of Python packages likenumpy,scipy, andpandas`. - [EXTERNAL_DOWNLOADS]: The skill facilitates the download and installation of software from various external sources including GitHub Releases, Snap Store, and official package registries. While the targets mentioned (Typst, TeX Live, Draw.io) are common development tools, the skill provides a mechanism for remote code retrieval and installation.
Audit Metadata