capture-environment

Pass

Audited by Gen Agent Trust Hub on Jun 14, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes the Bash tool to execute standard project management commands, including pip freeze, uv lock, conda env export, and Rscript. These commands are necessary for capturing the current state of the development environment.
  • [EXTERNAL_DOWNLOADS]: During the optional verification phase (Phase 3), the skill may trigger network activity to fetch dependencies from official registries (e.g., PyPI, CRAN, Docker Hub) when running pip install, renv::restore(), or docker build. These operations target well-known services and are governed by the project's own configuration files.
  • [DYNAMIC_EXECUTION]: The skill executes environment-probing code via Rscript -e and Stata .do files. These actions are limited to metadata extraction (e.g., sessionInfo(), ado dir) and are consistent with the primary purpose of identifying installed software versions.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 14, 2026, 11:25 AM
Security Audit — agent-trust-hub — capture-environment