arkweb-security-patch-fetch
Pass
Audited by Gen Agent Trust Hub on Aug 8, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches security patch files and commit metadata from well-known services including Chromium Gerrit (googlesource.com) and GitHub repositories.
- [COMMAND_EXECUTION]: Executes included Python scripts (
fetch_chromium_patch.pyandvalidate_patch_files.py) to process issue data and verify patch integrity. - [DATA_EXPOSURE]: Reads issue analysis files from the
.ace-outputsdirectory and writes fetched patches to a specific, isolated directory structure for subsequent processing stages. - [SAFE]: The skill implements content validation in
validate_patch_bytesto detect and reject invalid artifacts such as HTML error pages or JSON metadata, ensuring only valid diff/patch files are processed.
Audit Metadata