prefer-local-kody-execute
Pass
Audited by Gen Agent Trust Hub on Oct 13, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches the @kodycodes/cli tool via npx, which is a standard distribution method for this Node.js-based utility.
- [CREDENTIALS_UNSAFE]: Manages KODY_API_TOKEN and OAuth access tokens with explicit security guidance. The instructions direct the agent to avoid passing secrets via command-line flags (preventing visibility in process monitors like 'ps') and strictly prohibit outputting credentials into the chat interface.
- [COMMAND_EXECUTION]: Instructs the agent on how to use shell commands to execute local modules. The usage of '--local' and '--code' is consistent with the skill's primary purpose of local development and execution.
Audit Metadata