sgc-install-ai
Pass
Audited by Gen Agent Trust Hub on Aug 24, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns, obfuscation, or unauthorized behaviors were identified in the skill instructions or scripts. The workflow is focused on app integration and follows secure development practices.\n- [COMMAND_EXECUTION]: The skill includes a local validation utility (
scripts/validate_skill.py) meant for developer use. The script uses standard Python libraries and secure methods, such asyaml.safe_load, to process local metadata files without network access.\n- [DATA_EXFILTRATION]: The skill documentation explicitly mandates that API keys and secrets must not be stored in skill profiles or source control. It directs the user and agent to use server-side management and environment variables to mitigate credential exposure risks.\n- [REMOTE_CODE_EXECUTION]: The skill does not contain any patterns for downloading or executing remote code from untrusted external sources. All referenced dependencies are standard and local.
Audit Metadata