env-and-assets-bootstrap

Pass

Audited by Gen Agent Trust Hub on May 9, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The scripts/bootstrap_env.py script executes environment management commands (e.g., conda create, pip install) using subprocess.run with structured list arguments. This is a standard and secure method for automating development tasks and prevents shell injection vulnerabilities.
  • [DATA_EXFILTRATION]: The scripts/prepare_assets.py script scans repository files for asset URLs and file paths. This discovery is performed locally to help the agent identify necessary checkpoints and datasets for reproduction; the data is not exfiltrated to external or untrusted domains.
  • [SAFE]: No obfuscation, persistence mechanisms, or credential harvesting patterns were detected. The skill's behavior is transparent, documented, and aligned with its intended purpose of repository reproduction.
Audit Metadata
Risk Level
SAFE
Analyzed
May 9, 2026, 09:56 PM