setup-scvi-remote-tool
Pass
Audited by Gen Agent Trust Hub on Oct 11, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches configuration and requirement files from the vendor's GitHub repository (
mims-harvard/ToolUniverse) and the project's official domain (connect.aiscientist.tools). - [REMOTE_CODE_EXECUTION]: Installs the
tuplatform-connectpackage directly from a remote URL. The skill employs a security best practice by including a SHA-256 hash (sha256=3fad5eee...) in the installation command to verify the integrity of the downloaded wheel. - [COMMAND_EXECUTION]: Provides shell commands for environment setup, package management, and service orchestration using the ToolUniverse CLI (
tu). - [CREDENTIALS_UNSAFE]: References sensitive environment variables (
TOOLUNIVERSE_API_TOKEN,TOOLUNIVERSE_SERVICE_KEY). The skill correctly advises users to manage these via protected environment files or secure login flows rather than hardcoding them.
Audit Metadata