ops-tle-fetcher
Pass
Audited by Gen Agent Trust Hub on Aug 17, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/fetch_tle.pyexecutes a local peer script (manage_spacecraft.py) usingsubprocess.run. This is implemented using a list of arguments rather than a shell string, which effectively prevents shell injection vulnerabilities. - [EXTERNAL_DOWNLOADS]: The skill performs network requests to
space-track.orgto retrieve orbital data. This is an established, reputable service for satellite tracking information. These requests are limited to the official API endpoints. - [CREDENTIALS_UNSAFE]: The skill requires authentication for
space-track.org. It correctly handles these sensitive credentials by loading them from environment variables via a.envfile, following standard security best practices for secret management.
Audit Metadata