setup-scanvi-remote-tool
Pass
Audited by Gen Agent Trust Hub on Aug 24, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads a Python wheel from
connect.aiscientist.tools. This is a vendor-owned domain associated with the scANVI implementation and includes a pinned SHA-256 hash for integrity verification. - [COMMAND_EXECUTION]: The skill provides numerous shell commands for setting up virtual environments (
venv), installing dependencies viapip, and managing the service via a command-line utilitytu. These are standard development and deployment operations for the tool described. - [CREDENTIALS_SAFE]: The instructions demonstrate best practices for secret management, specifically advising the use of environment variables or protected configuration files (0600 permissions) rather than passing keys in command-line arguments.
- [REMOTE_CODE_EXECUTION]: While the skill downloads and installs a package from an external URL, the operation targets a vendor-specific resource with integrity pinning, which is categorized as safe vendor functionality.
Audit Metadata