skills/mattpocock/skills/wizard/Gen Agent Trust Hub

wizard

Pass

Audited by Gen Agent Trust Hub on Aug 19, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The template.sh file executes local CLI tools such as gh (GitHub CLI), tput, grep, and sed to manage environment variables and repository secrets. These are standard operations for the skill's stated purpose of infrastructure provisioning and credential setup.
  • [CREDENTIALS_SAFE]: The skill uses ask_secret (which uses read -rs) to ensure sensitive inputs are not echoed to the terminal. It also provides instructions to write secrets to .env files or GitHub secrets, which is a standard and recommended practice for managing project credentials.
  • [EXTERNAL_DOWNLOADS]: The skill uses open_url to open browser windows to specific service dashboards (e.g., Stripe) using system utilities like xdg-open or explorer.exe. These operations are user-initiated and target well-known service domains based on the user's specific workflow requirements.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 19, 2026, 01:07 PM
Security Audit — agent-trust-hub — wizard