squad
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill maps user intents to shell commands (e.g.,
squad upgrade,squad init,squad watch,squad plugin marketplace add). These are standard operations for a CLI-integrated skill. The risk is mitigated by explicit descriptions and, in some cases, confirmation prompts. - [SAFE]: File edits are restricted to the
.squad/config.jsonfile for configuration purposes (e.g., setting models or state backends), which is a legitimate use case for this skill. - [SAFE]: The 'Plugins & Skills' category allows adding plugins from a marketplace (
squad plugin marketplace add). While this involves external software, it uses the official CLI tool and follows standard plugin management patterns for this platform.
Audit Metadata