lov-iproyal-raylink

Pass

Audited by Gen Agent Trust Hub on Oct 5, 2026

Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The script scripts/iproyal_raylink.py utilizes subprocess.run to manage the Clash Verge application on macOS (using osascript to quit and open to restart) and to verify process status with pgrep. These operations are documented as part of the skill's application lifecycle management.
  • [DYNAMIC_EXECUTION]: The skill generates JavaScript configuration blocks at runtime to be injected into Clash Verge enhancement scripts. It performs a safety check using a local node installation to validate the syntax of the generated code before writing to the filesystem.
  • [EXTERNAL_DOWNLOADS]: The skill performs connectivity and IP verification by making HTTP requests to well-known services (Google and OpenAI/Cloudflare endpoints) through the configured proxy. These requests are for legitimate verification purposes and target trusted domains.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 5, 2026, 06:16 PM