verify-libre-mlops
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONREMOTE_CODE_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses a helper script (
bin/control-libre-mlops) to execute various CLI commands, includingclaude,grok,git, andjq, to automate plugin installation and component inventory. - [REMOTE_CODE_EXECUTION]: The skill includes functionality to clone GitHub pull requests and execute scripts found within the repository, specifically
setup.shandscripts/check.sh. This behavior is the primary intended function of the verification skill and is restricted to the context of testing the plugin pack. - [DATA_EXPOSURE_AND_EXFILTRATION]: The tool explicitly manages environment isolation by setting
CLAUDE_CONFIG_DIRandGROK_HOMEto isolated scratch directories within the skill's data store. This practice ensures that sensitive user configurations and credentials from the primary environment are not accessed or modified during the verification process.
Audit Metadata