skills/simota/agent-skills/hearth/Gen Agent Trust Hub

hearth

Pass

Audited by Gen Agent Trust Hub on Apr 25, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: Fetches the official Homebrew installation script from GitHub. This is a trusted source for macOS and Linux package management.\n- [EXTERNAL_DOWNLOADS]: Downloads the vim-plug and lazy.nvim plugin managers from well-known GitHub repositories to facilitate editor configuration.\n- [EXTERNAL_DOWNLOADS]: Downloads Nerd Fonts from the official ryanoasis/nerd-fonts repository, a standard source for terminal iconography.\n- [COMMAND_EXECUTION]: Executes shell commands to back up existing configurations, install dotfile managers, and benchmark shell startup performance. These operations are core to the skill's intended purpose.\n- [DATA_EXFILTRATION]: Mentions access to sensitive files like SSH keys and environment variables, but instructions are limited to secure management practices such as encryption via chezmoi or secret scanning via Gitleaks. No unauthorized data transmission was detected.\n- [SAFE]: The skill provides comprehensive guidance on avoiding common security pitfalls, such as hardcoding secrets in Git repositories, and implements defensive coding patterns like idempotent bootstrap scripts.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 25, 2026, 12:03 PM