skills/qredence/skills/rlm-debug/Gen Agent Trust Hub

rlm-debug

Pass

Audited by Gen Agent Trust Hub on Jun 24, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The script scripts/diagnose.py uses subprocess.run to execute uv run modal volume list. This is used to verify the connection to the Modal service and list available cloud storage volumes as part of the diagnostic process. The command uses a fixed list of arguments and is not subject to user-controlled input injection.
  • [DATA_EXPOSURE]: The skill checks for the presence of sensitive environment variables (e.g., MODAL_TOKEN_ID, DSPY_LM_API_KEY) and local configuration files (~/.modal.toml, .env). It intentionally hides the values in its output (printing 'present (hidden)') and only reports existence/absence, which follows security best practices for diagnostic tooling.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 24, 2026, 03:16 AM
Security Audit — agent-trust-hub — rlm-debug