verasic-fusion
Pass
Audited by Gen Agent Trust Hub on Jul 25, 2026
Risk Level: SAFEREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The README.md and install instructions provide a command to download and execute a setup script:
curl -fsSL https://raw.githubusercontent.com/Milkywayrules/verasic-skills/main/setup.sh | bash. This is a standard installation pattern for this vendor's tools. - [EXTERNAL_DOWNLOADS]: The skill references configuration and setup scripts hosted on the vendor's GitHub repository (
github.com/Milkywayrules/*). These are neutral references for installation and dependency management. - [COMMAND_EXECUTION]: The skill includes several bash scripts in the
scripts/directory (test-exhaustive.sh,test-regression.sh,test-exhaustive-protocol.sh) used for structural validation and regression testing. These scripts perform local file checks and grep operations. - [SAFE]: The skill implements strict 'read-only' boundaries in
references/fusion-protocol.md, explicitly forbidding write, edit, delete, commit, push, or deploy operations for both the main agent and subagents. This minimizes the risk of accidental or malicious repository modification.
Audit Metadata