skills/openlark/skills/zx/Gen Agent Trust Hub

zx

Pass

Audited by Gen Agent Trust Hub on Aug 8, 2026

Risk Level: SAFECOMMAND_EXECUTIONREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill provides extensive instructions and examples for executing arbitrary shell commands using the $ template literal, $.sync, and shell configuration options like $.shell, $.prefix, and $.postfix. These are the core features of the documented tool.
  • [REMOTE_CODE_EXECUTION]: The documentation in references/cli.md describes a built-in feature of zx that allows users to download and execute remote scripts via HTTPS URLs (e.g., zx https://...). The documentation includes a security warning advising users to only run scripts from trusted sources.
  • [EXTERNAL_DOWNLOADS]: The skill references external dependencies and network operations, including the use of npm install for library installation, fetch() for HTTP requests, and the --install CLI flag for automatic dependency resolution from npm registries.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 8, 2026, 04:17 AM
Security Audit — agent-trust-hub — zx