gaia-debugging
Pass
Audited by Gen Agent Trust Hub on Jul 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill executes several shell commands to manage benchmark results and perform diagnostics. These include using
nodefor JSON parsing and running the@claude-flow/cli. These operations are standard for the tool's purpose of debugging a local benchmark environment. - [EXTERNAL_DOWNLOADS]: The skill uses
npx @claude-flow/cli@latestto store and search for patterns. This involves fetching the latest version of the author's own CLI tool from the npm registry. As this is the vendor's own resource and matches the skill's stated purpose, it is considered safe practice. - [REMOTE_CODE_EXECUTION]: While the skill executes local node scripts and the
@claude-flowCLI, there is no evidence of piping remote content directly to a shell or executing code from untrusted external sources.
Audit Metadata