delivery-discovery
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to check the local environment for installed tools using commands like
python --version,node --version,ffmpeg -version, andmarp --version. These are standard version discovery checks used to provide realistic recommendations based on available workspace capabilities and do not incorporate unvalidated user input or execute untrusted code. - [DATA_EXPOSURE_&_EXFILTRATION]: The skill reads from local reference files and evaluates the local workspace for software availability. It does not access sensitive directories (e.g., SSH keys, AWS credentials, environment variables) and contains no network-bound operations, ensuring that workspace information remains local.
Audit Metadata