autopilot
Pass
Audited by Gen Agent Trust Hub on May 1, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches versioning information from the author's official GitHub repository via the GitHub API to check for updates. This is a neutral operation targeting a well-known service.- [REMOTE_CODE_EXECUTION]: Implements a self-update mechanism using
npx skills updateto fetch and run the latest version of the skill from the vendor's repository. This behavior is documented and tied to the user-configurable update policy.- [COMMAND_EXECUTION]: Utilizes standard development CLI tools (e.g., git, npm, npx, grep) to perform discovery, analysis, and execution phases of the autonomous mission loop. Commands are constrained by user-defined safety boundaries.- [DATA_EXFILTRATION]: Includes proactive safety measures in its 'Forbidden Zones' policy (Q4) that explicitly block access to environment variables, credentials, and private keys, reducing the risk of accidental or malicious data exposure.
Audit Metadata