skills/nmor/the-council/lua-patterns/Gen Agent Trust Hub

lua-patterns

Pass

Audited by Gen Agent Trust Hub on Oct 18, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The CI workflow in references/hooks.md downloads the StyLua formatter binary directly from its official GitHub releases page (github.com/JohnnyMorganz/StyLua). This is a standard practice for environment setup in development-oriented skills.
  • [COMMAND_EXECUTION]: The skill provides various shell scripts for pre-commit hooks and CI/CD automation in references/hooks.md. These include syntax checking with luac, linting with luacheck, and testing with busted. These commands are standard for maintaining Lua code quality.
  • [REMOTE_CODE_EXECUTION]: The skill uses hererocks (via pip) to manage Lua and LuaRocks installations in CI environments. This is a common and accepted method for version management in the Lua community.
  • [DYNAMIC_EXECUTION]: In references/security.md, the skill explicitly warns against the dangers of load and loadstring when used with untrusted input, providing safe sandboxing alternatives using _ENV and setfenv. This is a defensive security practice.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 18, 2026, 01:52 AM