shell-use
Pass
Audited by Gen Agent Trust Hub on Aug 3, 2026
Risk Level: SAFE
Full Analysis
- Remote Installation Mechanism: The skill's installation scripts download binary releases from the official repository on GitHub. This is a standard method for CLI tool distribution and ensures that components are obtained from the vendor's infrastructure.
- Environment and Persistence Modification: During installation, scripts update shell configuration files (such as
.bashrcor.zprofile) and system PATH variables to make the tool accessible. This is routine behavior for system-level utilities and ensures consistent access for both users and agents. - Shell and Process Spawning: The tool's primary purpose is to spawn and manage shell processes. While this provides extensive system control, the functionality is well-documented and forms the core intended use case of the skill.
- Data Redaction and Handling: The daemon includes logic to redact environment variable values when generating verbose logs for debugging. This prevents the accidental exposure of sensitive information or credentials that might be stored in the environment.
Audit Metadata