replay-user-flows

Pass

Audited by Gen Agent Trust Hub on Sep 18, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill mentions installation of the Reticle server using npx, which downloads the package from the public npm registry. This is part of the standard setup for the vendor's tools.\n
  • Evidence: RETICLE_INSTALL_SOURCE=npx_skill npx @reticlehq/server@latest init in SKILL.md.\n- [EXTERNAL_DOWNLOADS]: The skill provides commands to fetch reference documentation and guidelines from the vendor's domain.\n
  • Evidence: curl https://docs.reticle.sh/flows.md and curl https://docs.reticle.sh/llms.txt in SKILL.md.\n- [COMMAND_EXECUTION]: The skill defines tools for recording and replaying user journeys, which involves local file system operations such as saving flow data to the .reticle/flows/ directory.\n
  • Evidence: The skill describes the use of reticle_flow_save and reticle_flow_replay to manage regression test files.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 18, 2026, 09:19 AM
Security Audit — agent-trust-hub — replay-user-flows