aegis-production-ops
Pass
Audited by Gen Agent Trust Hub on Jun 22, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill enforces strong security boundaries by explicitly forbidding the agent from running mutation commands like
sudo,apt-get, ornpm install. It mandates a structured workflow where the agent can only suggest plans that must be signed and applied through a dedicated security daemon. - [SAFE]: Command execution in
scripts/aegis_status_snapshot.pyis implemented using best practices. Thesubprocess.runcalls utilize argument lists instead of shell strings, and the commands are restricted to read-only diagnostic tools (aegis doctor,apt-cache policy). - [SAFE]: The instructions demonstrate high security awareness by designating AI-generated reports (e.g.,
dspy_analysis) as 'untrusted advice' that cannot override deterministic Rust-based policies. - [SAFE]: No sensitive credential exposure or network exfiltration patterns were detected. The skill uses local endpoints and placeholder keys for maintenance tasks.
Audit Metadata