voxtype-install

Pass

Audited by Gen Agent Trust Hub on Oct 14, 2026

Risk Level: SAFEREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [REMOTE_CODE_EXECUTION]: Fetches and executes the official installation script for the uv package manager from Astral, a well-known service provider in the Python ecosystem.
  • [EXTERNAL_DOWNLOADS]: Instructs the agent to download the voxtype package from the Python Package Index (PyPI).
  • [INDIRECT_PROMPT_INJECTION]: The agent is instructed to read and modify the local configuration file ~/.config/voxtype/config.toml to help the user tune settings.
  • Ingestion points: ~/.config/voxtype/config.toml mentioned in SKILL.md.
  • Boundary markers: Absent.
  • Capability inventory: Shell command execution (uv, voxtype) and file system access (read/write for config.toml).
  • Sanitization: Absent.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 14, 2026, 10:56 AM