wizard
Pass
Audited by Gen Agent Trust Hub on Aug 28, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The
template.shfile includes shell functions that interact with the system, such asopen_url(which usesxdg-open,open, orexplorer.exe),write_env(which modifies.envfiles usinggrepandmktemp), andset_secret(which uses the GitHub CLIgh). These are legitimate utility functions for the stated purpose of a setup wizard. - [CREDENTIALS_SAFE]: The skill explicitly instructs the AI to use
ask_secretfor sensitive data, ensuring that user input for credentials is not echoed to the terminal. It also encourages storing secrets in.envfiles or GitHub secrets via theghtool, which is a standard and safe practice for secret management. - [SAFE]: The Stripe URL provided in the example stage is an official domain (
dashboard.stripe.com), and the operations are localized to the user's environment and their own GitHub repository via official CLI tools.
Audit Metadata