lemmaly
Pass
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill documentation references an optional CLI tool hosted on the author's GitHub repository at
https://github.com/morsechimwai/lemmaly.git. - [REMOTE_CODE_EXECUTION]: Provides a bash script template for downloading and executing a JavaScript-based scanner (
lemmaly.js) from a remote repository. The instructions include security guardrails, such as usingmktempfor isolation, pinning execution to a specific reviewed commit, and advising against automatic execution from the default branch. - [COMMAND_EXECUTION]: Describes the use of local shell commands including
git,node, andmktempto support the scanning workflow.
Audit Metadata