skills/ruvnet/ruflo/vector-setup/Gen Agent Trust Hub

vector-setup

Pass

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill downloads and installs several NPM packages related to the ruvector ecosystem, including ruvector, ruvector-onnx-embeddings-wasm, @ruvector/pi-brain, @ruvector/ruvllm, @ruvector/graph-node, and @ruvector/router. These are vendor-owned resources consistent with the skill's stated purpose.
  • [COMMAND_EXECUTION]: The skill executes multiple shell commands to manage the installation environment:
  • Uses npm install to set up the environment and its dependencies.
  • Uses npx to execute diagnostic and setup tools (doctor, info, identity, mcp, hooks, attention, rvf).
  • Uses claude mcp to register the server in the agent's configuration.
  • Executes a local shell script plugins/ruflo-ruvector/scripts/smoke.sh to perform automated verification of the installation.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 15, 2026, 11:38 AM
Security Audit — agent-trust-hub — vector-setup