replit-knowledge

Pass

Audited by Gen Agent Trust Hub on Sep 29, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONPERSISTENCE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The scripts/setup.sh script fetches binaries and installation archives from several official and well-known sources, including Google (Android command-line tools), Anthropic (Claude Code), Astral (uv), Ollama, and various project repositories on GitHub for tools like rclone, ffmpeg, and aria2.
  • [REMOTE_CODE_EXECUTION]: The setup script downloads and executes installation scripts for uv (from astral.sh), Ollama (from ollama.com), and the Hermes Agent (from nousresearch.com). These operations are performed using official installer scripts for these respective developer tools.
  • [COMMAND_EXECUTION]: The skill uses shell commands to manage the environment, including directory creation, binary symlinking, and structural modification of configuration files using a helper Python script.
  • [PERSISTENCE]: The skill implements persistence by modifying the shell configuration (.bashrc) and the platform-specific .replit environment settings to ensure the installed tools remain available across container restarts.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 29, 2026, 08:41 AM