setup-harmony-remote-tool
Pass
Audited by Gen Agent Trust Hub on Oct 11, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches installation requirements and package files from
connect.aiscientist.toolsand themims-harvardGitHub organization. This includes a Python wheel installation that uses SHA-256 hash pinning (3fad5eee5ecf7887a693d93ccd1aa112dc0955617a885d1fc3daded0030f9ae0) to ensure file integrity. - [COMMAND_EXECUTION]: The instructions provide a sequence of shell commands for creating virtual environments, installing dependencies, and operating the
tu(ToolUniverse) CLI tool. These are standard deployment procedures for the Harmony implementation. - [DYNAMIC_EXECUTION]: The skill utilizes Python HEREDOC patterns (`python
- <<'PY'`) to execute small verification scripts locally. These scripts are used to test discovery and call functionality of the MCP (Model Context Protocol) endpoint.
- [SAFE]: The skill follows security best practices by explicitly warning the user against exposing credentials (like
TOOLUNIVERSE_SERVICE_KEY) in shell arguments and recommends the use of protected environment files or browser-based device authorization.
Audit Metadata