wizard
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The
template.shscript executes standard system commands (tput,grep,mktemp,mv,gh) and cross-platform browser openers (wslview,explorer.exe,xdg-open,open). These are well-known tools used for their intended purpose in a setup wizard context. - [CREDENTIALS_SAFE]: The skill implements best practices for secret management. It provides an
ask_secrethelper that usesread -rsto hide input on the terminal and documents that secrets should be stored in.envfiles or GitHub secrets via theghCLI. While the example code mentions Stripe key prefixes (pk_test_), these are illustrative placeholders for the user to follow, not hardcoded credentials.
Audit Metadata