hve-core-installer
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFE
Full Analysis
- Repository Interaction: The skill instructions involve cloning assets from the official Microsoft HVE-Core repository on GitHub. This is the primary source of the installers components and is handled via standard version control tools.
- System Configuration: The skill automates the setup of project-level configuration files, specifically
.vscode/settings.json,.vscode/mcp.json, and.gitignore. These actions are managed through explicit authorization checkpoints where the agent must obtain user consent before proceeding with changes. - Local Script Execution: The skill includes a suite of PowerShell and Bash scripts to perform technical tasks like environment detection and file hash verification. These scripts are designed with security in mind, featuring an
Assert-WithinTargetRootfunction that verifies paths to prevent writes outside of the intended project directory, including checks against symbolic link and junction attacks. - Extension Management: The skill facilitates the installation of the official HVE Core VS Code extension from the VS Code Marketplace, using the standard CLI commands.
Audit Metadata