setup
Pass
Audited by Gen Agent Trust Hub on Oct 1, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill downloads and executes an installation script from the author's official GitHub repository as part of the setup process.
- Evidence: In Phase 4 of
SKILL.md, the agent is instructed to runcurl -fsSL https://raw.githubusercontent.com/northraystudio/maruda/main/harness/scripts/install.sh | bash -s --if local copies are unavailable. - [EXTERNAL_DOWNLOADS]: Fetches harness components, templates, and the installer script from the
northraystudioGitHub organization. - [COMMAND_EXECUTION]: The skill uses shell commands to verify the environment, check for existing configurations, and apply project settings including writing files like
CLAUDE.mdand.claude/settings.json.
Audit Metadata