synapseml-local-setup

Pass

Audited by Gen Agent Trust Hub on Jun 29, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • Local Command Execution: The skill employs shell scripts to interface with local development tools, including sbt, git, and java. These commands are used to diagnose the environment, compile the project, and execute tests within a user-defined repository path. This is standard behavior for a skill focused on library development and validation.
  • External Dependency Management: The use of sbt (Scala Build Tool) implies the downloading of library dependencies from public repositories such as Maven Central. This is a routine operation for Java and Scala projects, necessary for resolving the project's build-time requirements.
  • Automated Service Detection: The skill includes a specific script, check-live-service-tests.sh, designed to scan test files for signatures of live external service interactions. This serves as a safety mechanism, instructing the agent to pause and request user confirmation before running tests that might create or modify real-world cloud resources.
  • Environment Isolation: The scripts explicitly manage JAVA_HOME and the system PATH to target a specific JDK 11 installation. This practice ensures build reproducibility and avoids common compilation errors associated with incompatible Java versions, without affecting the user's global system configuration.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 29, 2026, 03:47 PM
Security Audit — agent-trust-hub — synapseml-local-setup