skills/pudap/skills/puda-protocol/Gen Agent Trust Hub

puda-protocol

Pass

Audited by Gen Agent Trust Hub on Apr 29, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses local CLI commands (e.g., puda login, puda init, puda config list) which are appropriate for its stated purpose of managing protocols within the PUDA ecosystem.
  • [DYNAMIC_EXECUTION]: Python is used to execute small, safe code snippets via python -c to generate UUIDs and ISO timestamps. This is a standard utility pattern and does not involve untrusted input.
  • [DATA_EXPOSURE]: The skill reads user configuration information (user_id, username) using puda config list. This data is used solely to populate local JSON protocol files and is not exfiltrated to external destinations.
  • [SAFE]: No obfuscation, persistence mechanisms, or unauthorized privilege escalation attempts were found. The skill relies on standard tool-chaining with other internal skills (puda-labs, puda-memory).
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 29, 2026, 01:53 AM