bilig-workpaper

Pass

Audited by Gen Agent Trust Hub on Jul 25, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: Downloads the @bilig/workpaper package from the NPM registry at runtime using the npm exec command to provide workbook logic capabilities.\n- [COMMAND_EXECUTION]: Executes various vendor-provided CLI utilities such as bilig-agent-start, bilig-evaluate, and bilig-workpaper-mcp to Recalculate formulas and manage MCP server instances.\n- [EXTERNAL_DOWNLOADS]: References official documentation, remote MCP testing endpoints, and skill installation resources hosted on the author's domain proompteng.ai and associated GitHub Pages.\n- [SAFE]: Includes explicit safety instructions directing the agent to validate workbook file paths and reject inputs containing unsafe shell characters, reducing the risk of command injection.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 25, 2026, 09:50 PM
Security Audit — agent-trust-hub — bilig-workpaper