gridcraft
Pass
Audited by Gen Agent Trust Hub on Oct 19, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill makes extensive use of the
gridcraft-cliand a localhost control channel to manage the application. These are documented as standard automation interfaces for the GridCraft app. - [EXTERNAL_DOWNLOADS]: The documentation references the official GitHub repository
github.com/storytold/gridcraftfor source code and releases. These are standard project references and do not involve untrusted remote execution. - [REMOTE_CODE_EXECUTION]: While the skill mentions MCP and CLI automation, it specifically notes that VBA macros inside
.xlsmfiles are preserved but NEVER executed, which is a significant safety feature for handling potentially malicious spreadsheet files.
Audit Metadata