hearth
Pass
Audited by Gen Agent Trust Hub on Apr 25, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches the official Homebrew installation script from GitHub. This is a trusted source for macOS and Linux package management.\n- [EXTERNAL_DOWNLOADS]: Downloads the
vim-plugandlazy.nvimplugin managers from well-known GitHub repositories to facilitate editor configuration.\n- [EXTERNAL_DOWNLOADS]: Downloads Nerd Fonts from the official ryanoasis/nerd-fonts repository, a standard source for terminal iconography.\n- [COMMAND_EXECUTION]: Executes shell commands to back up existing configurations, install dotfile managers, and benchmark shell startup performance. These operations are core to the skill's intended purpose.\n- [DATA_EXFILTRATION]: Mentions access to sensitive files like SSH keys and environment variables, but instructions are limited to secure management practices such as encryption via chezmoi or secret scanning via Gitleaks. No unauthorized data transmission was detected.\n- [SAFE]: The skill provides comprehensive guidance on avoiding common security pitfalls, such as hardcoding secrets in Git repositories, and implements defensive coding patterns like idempotent bootstrap scripts.
Audit Metadata