nova-client-proxy

Pass

Audited by Gen Agent Trust Hub on Jul 31, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill provides commands to download the application installer and GeoIP databases from the official repository of the project (IRNova/Nova-Client) and a well-known community repository (Loyalsoldier/geoip). These are standard installation and configuration steps for a VPN client.
  • [COMMAND_EXECUTION]: The documentation includes standard CLI commands for installing software on various platforms, such as adb install for Android, Invoke-WebRequest for Windows, and hdiutil for macOS. These are intended for the user to execute during manual installation.
  • [REMOTE_CODE_EXECUTION]: While the skill demonstrates fetching configuration and IP lists from external URLs (e.g., cloudflare.com, github.com), these operations are limited to data parsing (JSON/CSV) within the provided Dart code and do not involve executing remote scripts or binaries.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 31, 2026, 02:19 PM
Security Audit — agent-trust-hub — nova-client-proxy