hyperexecute-skill

Pass

Audited by Gen Agent Trust Hub on Oct 29, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill invokes the HyperExecute CLI and local Node.js utility scripts to manage test workflows and validate project configurations.
  • Evidence: scripts/doctor.js uses child_process.spawnSync with shell: false to securely execute the CLI tool while passing credentials as arguments.
  • [EXTERNAL_DOWNLOADS]: The instructions advise the agent to assist in downloading the official HyperExecute binary from the service provider if it is not present on the host system.
  • Evidence: SKILL.md provides a workflow for locating or acquiring the CLI binary after obtaining user approval.
  • [CREDENTIALS_SAFE]: Includes proactive auditing to ensure that sensitive service credentials are not exposed in static configuration files.
  • Evidence: scripts/validate-config.js uses regular expressions to detect and warn against hardcoded LT_ACCESS_KEY or LT_USERNAME values in the YAML configuration.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 29, 2026, 02:43 AM