createos
Pass
Audited by Gen Agent Trust Hub on Apr 20, 2026
Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
- [COMMAND_EXECUTION]: The skill contains Python and shell scripts (
createos.py,deploy.sh,quick-deploy.sh) that execute system-level commands to interact with the CreateOS API and manage local files for deployment purposes. - [DATA_EXFILTRATION]: The skill includes functionality to iterate through local project directories and read file contents to upload them to the CreateOS API at
api-createos.nodeops.network. This behavior is the intended core function of the deployment platform integration and targets verified vendor domains. - [DYNAMIC_EXECUTION]: The shell-based deployment scripts utilize inline Python blocks to perform data processing tasks, such as Base64 encoding files and generating JSON payloads, which is a standard method for handling complex data structures in hybrid script environments.
Audit Metadata