hyperexecute-skill
Pass
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill invokes the HyperExecute CLI and local Node.js utility scripts to manage test workflows and validate project configurations.
- Evidence:
scripts/doctor.jsuseschild_process.spawnSyncwithshell: falseto securely execute the CLI tool while passing credentials as arguments. - [EXTERNAL_DOWNLOADS]: The instructions advise the agent to assist in downloading the official HyperExecute binary from the service provider if it is not present on the host system.
- Evidence:
SKILL.mdprovides a workflow for locating or acquiring the CLI binary after obtaining user approval. - [CREDENTIALS_SAFE]: Includes proactive auditing to ensure that sensitive service credentials are not exposed in static configuration files.
- Evidence:
scripts/validate-config.jsuses regular expressions to detect and warn against hardcodedLT_ACCESS_KEYorLT_USERNAMEvalues in the YAML configuration.
Audit Metadata