j-space
Pass
Audited by Gen Agent Trust Hub on Jul 8, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads the 'uv' package manager directly from astral.sh using 'curl | sh' syntax. This is the documented installation method for a well-known developer tool.
- [EXTERNAL_DOWNLOADS]: The setup script fetches a public embedding model (all-MiniLM-L6-v2) from Hugging Face. This is a standard operation for ML-enabled local tools and uses anonymous access.
- [COMMAND_EXECUTION]: The skill executes local shell commands to manage its Python virtual environment and run the core 'jspace.py' logic. These operations are scoped to the agent's local environment and are necessary for the skill's primary function of providing a local mental workspace.
Audit Metadata