majia-guanyuan
Pass
Audited by Gen Agent Trust Hub on Jul 3, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes local shell commands for environment setup and dependency management. Specifically, the 'bin/install.js' script manages the installation of the '@guandata/guanskill' package and executes setup commands. These operations are necessary for the skill to act as an orchestrator for the BI toolchain.- [EXTERNAL_DOWNLOADS]: Users are directed to install required CLI tools from the official npm registry. These downloads are legitimate dependencies for the BI platform integration and do not pose a security risk.- [SAFE]: All demo data included in the repository is thoroughly sanitized. For instance, the member datasets in the 'examples/' directory contain masked phone numbers and anonymized identifiers, adhering to data privacy best practices.- [SAFE]: JavaScript and SQL snippets provided in the templates and reference guides are designed for use within the secure runtime of the Guandata BI platform. They enable advanced features like custom charting and ETL logic without compromising system security.
Audit Metadata