lolipop-deploy

Pass

Audited by Gen Agent Trust Hub on May 11, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: Fetches deployment instructions and service information from https://lolipop.jp/ai/skills/skill.md. This domain is the official platform for the service, and the fetch is used to provide the most current documentation to the user.
  • [COMMAND_EXECUTION]: Guides users through deployment using tools like rsync via SSH. The instructions include a mandatory safeguard requiring user confirmation before performing destructive operations, such as rsync --delete.
  • [CREDENTIALS_SAFE]: Explicitly prohibits the agent from saving passwords or authentication tokens in plaintext. It directs the use of secure, OS-native storage solutions like macOS Keychain and Windows Credential Manager.
Audit Metadata
Risk Level
SAFE
Analyzed
May 11, 2026, 05:42 AM
Security Audit — agent-trust-hub — lolipop-deploy