skills/proggarapsody/bitbottle/wizard/Gen Agent Trust Hub

wizard

Pass

Audited by Gen Agent Trust Hub on Oct 8, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The template.sh script executes standard system commands (tput, grep, mktemp, mv, gh) and cross-platform browser openers (wslview, explorer.exe, xdg-open, open). These are well-known tools used for their intended purpose in a setup wizard context.
  • [CREDENTIALS_SAFE]: The skill implements best practices for secret management. It provides an ask_secret helper that uses read -rs to hide input on the terminal and documents that secrets should be stored in .env files or GitHub secrets via the gh CLI. While the example code mentions Stripe key prefixes (pk_test_), these are illustrative placeholders for the user to follow, not hardcoded credentials.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 8, 2026, 11:39 PM