setup-toolchain
Pass
Audited by Gen Agent Trust Hub on Jul 25, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill implements logic via bash scripts (
enforce-toolchain.shandsession-env.sh) that are executed by the agent environment as hooks. These scripts analyze commands and manage environment state. - [SAFE]: The script
enforce-toolchain.shfunctions as a security guardrail by intercepting shell commands before execution. It blocks potentially destructive operations such as broadrm -rfcommands,git push --force, andgit reset --hardunless they target a whitelist of safe directories (e.g.,node_modules,.next,dist). - [SAFE]: The
session-env.shscript performs routine maintenance, such as cleaning up its own temporary session directories in/tmp/hook-session-*and establishing environment variables for the current session. The file operations are scoped to a specific prefix and directory. - [SAFE]: No network operations, data exfiltration patterns, or obfuscation techniques were identified. The skill operates entirely within the local project context using standard toolchain components (git, bun, jq).
Audit Metadata