puda-manual-ui

Pass

Audited by Gen Agent Trust Hub on Jul 24, 2026

Risk Level: SAFE

Full Analysis

[COMMAND_EXECUTION]: The skill instructions and the reference script (references/first-manual-app.py) utilize subprocess.run to execute commands via the puda CLI. This is the legitimate and primary purpose of the skill. The implementation is secure as it uses a list of arguments rather than a shell string, effectively mitigating shell injection risks. Additionally, shlex.quote is employed for safe command logging.

Audit Metadata

Risk Level

SAFE

Analyzed

Jul 24, 2026, 09:48 AM

Security Audit — agent-trust-hub — puda-manual-ui