just
Pass
Audited by Gen Agent Trust Hub on Apr 19, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The README.md file and multiple example files contain instructions to download setup scripts from external domains.
- Evidence: Installation command for 'just' from
https://just.systems/install.sh. - Evidence: Installation commands for 'pre-commit' and 'golangci-lint' in
examples/pre-commit.justfrompre-commit.comandraw.githubusercontent.com. All sources are official project repositories or well-known services. - [REMOTE_CODE_EXECUTION]: The documentation includes standard patterns for piping remote installation scripts directly to a shell or interpreter.
- Evidence: Piping the
just.systemsinstall script tobashin README.md. - Evidence: Piping a script from
pre-commit.comtopython3and aninstall.shfrom GitHub toshinexamples/pre-commit.just. These are legitimate, documented installation procedures for the software described in the skill.
Audit Metadata