grep-upgrade

Pass

Audited by Gen Agent Trust Hub on Aug 14, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes a local Node.js script (billing.js) to interact with the service's billing logic. This script is used to verify waitlist status, check current plan tiers, and generate secure checkout sessions.
  • [COMMAND_EXECUTION]: The skill invokes system-level commands such as open, xdg-open, or wslview to launch the Stripe checkout URL provided by the billing script in the user's default browser. This ensures that sensitive payment information is handled in a secure, external environment rather than within the agent's context.
  • [SAFE]: The skill implements a trust-based workflow where all payment-related URLs and user statuses are derived from local scripts managed by the vendor. It explicitly instructs against asking for credit card details directly, which mitigates the risk of credential exposure.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 14, 2026, 09:40 PM
Security Audit — agent-trust-hub — grep-upgrade