using-flowerpower
Pass
Audited by Gen Agent Trust Hub on Jul 1, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The management scripts (
init_project.py,create_pipeline.py,list_pipelines.py, andrun_pipeline.py) utilizesubprocess.runto interact with the system environment. These calls are used to invoke theflowerpowerCLI for project management and thepippackage manager for dependency resolution. These executions are performed using list-based arguments which mitigate common shell injection risks. - [EXTERNAL_DOWNLOADS]: The skill provides automated installation of the
flowerpowerpackage from the official Python Package Index (PyPI). This is a standard procedure for setting up the necessary development environment for the framework described in the skill's documentation.
Audit Metadata