lolipop-deploy
Pass
Audited by Gen Agent Trust Hub on May 11, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches deployment instructions and service information from
https://lolipop.jp/ai/skills/skill.md. This domain is the official platform for the service, and the fetch is used to provide the most current documentation to the user. - [COMMAND_EXECUTION]: Guides users through deployment using tools like
rsyncvia SSH. The instructions include a mandatory safeguard requiring user confirmation before performing destructive operations, such asrsync --delete. - [CREDENTIALS_SAFE]: Explicitly prohibits the agent from saving passwords or authentication tokens in plaintext. It directs the use of secure, OS-native storage solutions like macOS Keychain and Windows Credential Manager.
Audit Metadata