skills/kevinzai/commander/fleet/Gen Agent Trust Hub

fleet

Pass

Audited by Gen Agent Trust Hub on Jun 19, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill instructs the user to execute npx @cc-commander/fleet, which downloads and runs the commander package from the official NPM registry to establish the local API environment.
  • [COMMAND_EXECUTION]: Utilizes curl commands to interact with localhost:4680 and the official Linear GraphQL API at api.linear.app. These operations are limited to status checks, team management, and fetching task descriptions.
  • [SAFE]: Accesses the LINEAR_API_KEY_PERSONAL environment variable to authenticate requests to Linear. This is a standard and secure practice for managing API secrets, and the data is transmitted only to the intended well-known service domain.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 19, 2026, 11:14 PM
Security Audit — agent-trust-hub — fleet