mayar
Pass
Audited by Gen Agent Trust Hub on Aug 9, 2026
Risk Level: SAFEREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The installation script (
install.sh) and instructions in theREADME.mdemploy standard patterns to download and execute code from the author's official GitHub repository and the public NPM registry. These are trusted sources for the tool's distribution.\n- [COMMAND_EXECUTION]: The skill documentation inSKILL.mdutilizes the!commandsyntax to retrieve help data for theglabCLI. These commands are used solely for information retrieval and are not part of any malicious execution chain.\n- [SAFE]: The project includes a comprehensive set of security enforcement scripts located inhooks/claude/. These scripts, such asblock-sensitive-files.shandsanitize-output.sh, provide significant defense-in-depth by monitoring the agent's actions to prevent unauthorized access to sensitive local files and accidental exposure of credentials.
Audit Metadata