check-tools
Pass
Audited by Gen Agent Trust Hub on Oct 13, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATION
Full Analysis
- [COMMAND_EXECUTION]: The diagnostic scripts (
assets/check-tools.shandassets/environment-diagnostic.sh) utilize standard system commands such asuname,hostname,lscpu,free,df,mount, andpsto perform environment discovery. They also systematically check the existence and versions of numerous development tools (e.g.,python3,node,gcc,git) usingcommand -vand version flags. These executions are appropriate for the skill's functional goal of environment validation.\n- [EXTERNAL_DOWNLOADS]: The documentation filereferences/tool-categories.mdcontains installation instructions for various ecosystems that involve downloading installers from official external sources (e.g.,rustup.rs,python-poetry.org,nvm-sh). These sources are well-known official providers for the respective tools, and the instructions are provided for user reference rather than automated background execution.\n- [DATA_EXFILTRATION]: The skill's diagnostic script gathers environment metadata, including hardware resources, mount points, selected environment variables, and process lists. It also lists the contents of specific directories (e.g.,/mnt/user-data). This information gathering is the primary purpose of the diagnostic tool and is presented to the user as a local report.\n- [SAFE]: The static analysis warning regarding destructive commands (e.g.,rm -rf) inreferences/tool-categories.mdis a false positive in context. The commandsudo rm -rf /usr/local/gois a targeted step within the documented official Go installation procedure used to remove legacy versions before installing a new one.
Audit Metadata