env-and-assets-bootstrap
Pass
Audited by Gen Agent Trust Hub on May 9, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The
scripts/bootstrap_env.pyscript executes environment management commands (e.g.,conda create,pip install) usingsubprocess.runwith structured list arguments. This is a standard and secure method for automating development tasks and prevents shell injection vulnerabilities. - [DATA_EXFILTRATION]: The
scripts/prepare_assets.pyscript scans repository files for asset URLs and file paths. This discovery is performed locally to help the agent identify necessary checkpoints and datasets for reproduction; the data is not exfiltrated to external or untrusted domains. - [SAFE]: No obfuscation, persistence mechanisms, or credential harvesting patterns were detected. The skill's behavior is transparent, documented, and aligned with its intended purpose of repository reproduction.
Audit Metadata