editor-setup

Pass

Audited by Gen Agent Trust Hub on Aug 21, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes standard system commands for software management.
  • Uses brew install --cask for installing well-known editors.
  • Uses code --install-extension and cursor --install-extension to manage editor plugins.
  • Performs file system operations for configuration management, specifically creating timestamped backups of settings.json before performing merges.
  • [EXTERNAL_DOWNLOADS]: Fetches software and extensions from established, reputable sources.
  • Downloads are initiated through Homebrew for official editor casks.
  • VS Code extensions are referenced by their official marketplace identifiers (e.g., ms-vscode-remote.remote-ssh).
  • [DATA_EXPOSURE_AND_EXFILTRATION]: No sensitive data access or external transmission was detected.
  • File access is restricted to application-specific configuration paths (~/Library/Application Support/Code/User/settings.json).
  • While the git.autofetch setting is enabled (which triggers background network activity by Git), this is a standard feature and is explicitly noted in the instructions.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 21, 2026, 06:29 PM
Security Audit — agent-trust-hub — editor-setup