agency-client-handoff
Pass
Audited by Gen Agent Trust Hub on Jun 25, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONREMOTE_CODE_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches a setup script for the official
gen-ai-cliutility from the vendor's domain (picsart.com). This tool is required to verify that the packaged deliverables are reproducible. - [COMMAND_EXECUTION]: Uses standard shell commands (
find,cp,mkdir,zip,unzip,jq) to structure the handoff bundle and filter internal metadata. It also executes a local Node.js script (scripts/extract-prompts.js) to process project data. - [REMOTE_CODE_EXECUTION]: The skill includes a setup instruction that pipes a script from
https://picsart.com/gen-ai-cli/install.shto a shell. This is a legitimate installation method for the vendor's own command-line interface and is consistent with the skill's stated purpose.
Audit Metadata