litestar-build

Pass

Audited by Gen Agent Trust Hub on Sep 19, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill references several external resources for its build and CI pipelines, including Python distributions from the Astral Python Build Standalone project, Node.js runtimes from Bun, and the Zig compiler. All referenced sources are well-known technology services or trusted organizations.
  • [REMOTE_CODE_EXECUTION]: The GitHub Actions configurations include shell commands that pipe remote installation scripts to sh or bash (e.g., for uv and bun setup). These operations target official, trusted domains (astral.sh and bun.sh) and are standard practices for environment provisioning in CI.
  • [COMMAND_EXECUTION]: A disk cleanup script for GitHub Actions runners is provided, which uses sudo rm -rf to remove unnecessary pre-installed tools (like .NET, Android SDK, and GHC) to free space. This is a common and safe optimization for runner environments.
  • [DYNAMIC_EXECUTION]: The provided bundler.py build script uses regular expressions to dynamically patch the Rust source code of the pyapp library during the build process to customize the installation directory. This is an intended development-time feature and does not involve untrusted data.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 19, 2026, 07:08 PM
Security Audit — agent-trust-hub — litestar-build