aegis-production-ops

Pass

Audited by Gen Agent Trust Hub on Jun 22, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill enforces strong security boundaries by explicitly forbidding the agent from running mutation commands like sudo, apt-get, or npm install. It mandates a structured workflow where the agent can only suggest plans that must be signed and applied through a dedicated security daemon.
  • [SAFE]: Command execution in scripts/aegis_status_snapshot.py is implemented using best practices. The subprocess.run calls utilize argument lists instead of shell strings, and the commands are restricted to read-only diagnostic tools (aegis doctor, apt-cache policy).
  • [SAFE]: The instructions demonstrate high security awareness by designating AI-generated reports (e.g., dspy_analysis) as 'untrusted advice' that cannot override deterministic Rust-based policies.
  • [SAFE]: No sensitive credential exposure or network exfiltration patterns were detected. The skill uses local endpoints and placeholder keys for maintenance tasks.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 22, 2026, 02:08 AM
Security Audit — agent-trust-hub — aegis-production-ops