check-tools

Pass

Audited by Gen Agent Trust Hub on Oct 13, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATION
Full Analysis
  • [COMMAND_EXECUTION]: The diagnostic scripts (assets/check-tools.sh and assets/environment-diagnostic.sh) utilize standard system commands such as uname, hostname, lscpu, free, df, mount, and ps to perform environment discovery. They also systematically check the existence and versions of numerous development tools (e.g., python3, node, gcc, git) using command -v and version flags. These executions are appropriate for the skill's functional goal of environment validation.\n- [EXTERNAL_DOWNLOADS]: The documentation file references/tool-categories.md contains installation instructions for various ecosystems that involve downloading installers from official external sources (e.g., rustup.rs, python-poetry.org, nvm-sh). These sources are well-known official providers for the respective tools, and the instructions are provided for user reference rather than automated background execution.\n- [DATA_EXFILTRATION]: The skill's diagnostic script gathers environment metadata, including hardware resources, mount points, selected environment variables, and process lists. It also lists the contents of specific directories (e.g., /mnt/user-data). This information gathering is the primary purpose of the diagnostic tool and is presented to the user as a local report.\n- [SAFE]: The static analysis warning regarding destructive commands (e.g., rm -rf) in references/tool-categories.md is a false positive in context. The command sudo rm -rf /usr/local/go is a targeted step within the documented official Go installation procedure used to remove legacy versions before installing a new one.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 13, 2026, 06:49 PM