vss-deploy

Pass

Audited by Gen Agent Trust Hub on Aug 18, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill includes a bootstrap script that automatically fetches the required application source code from the official open-edge-platform repository on GitHub using a shallow, sparse clone to minimize data retrieval.
  • [COMMAND_EXECUTION]: The skill executes local shell commands and Docker Compose to automate the setup, deployment, and management of the VSS application, which is the primary intended function of the skill.
  • [CREDENTIALS_SAFE]: The skill provides a utility script, gen-secrets.sh, which generates strong random credentials using OpenSSL for local service authentication. It follows best practices by saving these to a gitignored environment file with restricted file permissions (0600) to prevent accidental exposure.
  • [LOCAL_DATA_MANAGEMENT]: The skill provides clear instructions and commands for the full teardown of the application, including the secure removal of persistent data volumes when requested by the user.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 18, 2026, 12:04 AM
Security Audit — agent-trust-hub — vss-deploy