synapseml-local-setup
Pass
Audited by Gen Agent Trust Hub on Jun 29, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- Local Command Execution: The skill employs shell scripts to interface with local development tools, including
sbt,git, andjava. These commands are used to diagnose the environment, compile the project, and execute tests within a user-defined repository path. This is standard behavior for a skill focused on library development and validation. - External Dependency Management: The use of
sbt(Scala Build Tool) implies the downloading of library dependencies from public repositories such as Maven Central. This is a routine operation for Java and Scala projects, necessary for resolving the project's build-time requirements. - Automated Service Detection: The skill includes a specific script,
check-live-service-tests.sh, designed to scan test files for signatures of live external service interactions. This serves as a safety mechanism, instructing the agent to pause and request user confirmation before running tests that might create or modify real-world cloud resources. - Environment Isolation: The scripts explicitly manage
JAVA_HOMEand the systemPATHto target a specific JDK 11 installation. This practice ensures build reproducibility and avoids common compilation errors associated with incompatible Java versions, without affecting the user's global system configuration.
Audit Metadata