using-flowerpower

Pass

Audited by Gen Agent Trust Hub on Jul 1, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The management scripts (init_project.py, create_pipeline.py, list_pipelines.py, and run_pipeline.py) utilize subprocess.run to interact with the system environment. These calls are used to invoke the flowerpower CLI for project management and the pip package manager for dependency resolution. These executions are performed using list-based arguments which mitigate common shell injection risks.
  • [EXTERNAL_DOWNLOADS]: The skill provides automated installation of the flowerpower package from the official Python Package Index (PyPI). This is a standard procedure for setting up the necessary development environment for the framework described in the skill's documentation.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 1, 2026, 09:16 PM
Security Audit — agent-trust-hub — using-flowerpower