install-cli-tools
Pass
Audited by Gen Agent Trust Hub on Aug 5, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill provides standard shell commands for installing development tools via Homebrew and NPM. These commands are intended for local environment setup and are presented for user confirmation rather than autonomous execution.
- [EXTERNAL_DOWNLOADS]: The skill references several well-known CLI tools including EAS CLI, Fastlane, Sentry CLI, Maestro, and the GitHub CLI. These are industry-standard tools from established organizations. The instructions explicitly warn against insecure installation methods like piping network downloads directly into a shell.
- [CREDENTIALS_UNSAFE]: The skill includes proactive security guidelines for credential handling. It instructs the agent to never request or save sensitive items like Apple .p8 files, EAS tokens, or Sentry tokens, and instead directs users to use provider-controlled login flows.
Audit Metadata