easy-cheese-setup
Pass
Audited by Gen Agent Trust Hub on Aug 2, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes external CLI tools, specifically
gitandhallouminate, usingsubprocess.runto gather repository information and perform initialization tasks. - [COMMAND_EXECUTION]: The skill leverages a bundled Python Zip Application (
easy-cheese-setup.pyz) for its main logic and provides instructions for executing specific Python one-liners for legacy data migration. - [SAFE]: The skill implements a robust 'detect → report → confirm → fix' loop, ensuring the user is informed of all pending file system and configuration changes before they are applied.
- [SAFE]: File modifications to the user's
config.tomlare performed using atomic write operations (writing to a temporary file before replacement) to prevent file corruption in case of execution interruption. - [SAFE]: Input derived from external sources, such as Git remote URLs used to generate project keys, is properly sanitized using regular expressions to prevent path traversal or command injection via malformed repository metadata.
Audit Metadata