setup-esm-remote-tool
Pass
Audited by Gen Agent Trust Hub on Aug 24, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads a Python wheel from
https://connect.aiscientist.tools/. This is verified by a SHA-256 hash (3fad5eee5ecf7887a693d93ccd1aa112dc0955617a885d1fc3daded0030f9ae0) to ensure integrity. The domain is associated with the tool's scientific ecosystem. - [COMMAND_EXECUTION]: The skill executes various system commands for environment setup, including
python3 -m venv,pip install, and specialized CLI tools liketu remote. These are standard operations for deploying specialized AI tooling. - [DATA_EXPOSURE]: The documentation explicitly warns against putting credentials like
TOOLUNIVERSE_API_TOKENorTOOLUNIVERSE_SERVICE_KEYin shell arguments or results, recommending secure environment variables or 0600-permission files instead. This aligns with security best practices.
Audit Metadata