replit-knowledge
Pass
Audited by Gen Agent Trust Hub on Sep 29, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONPERSISTENCE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The
scripts/setup.shscript fetches binaries and installation archives from several official and well-known sources, including Google (Android command-line tools), Anthropic (Claude Code), Astral (uv), Ollama, and various project repositories on GitHub for tools like rclone, ffmpeg, and aria2. - [REMOTE_CODE_EXECUTION]: The setup script downloads and executes installation scripts for
uv(from astral.sh),Ollama(from ollama.com), and theHermes Agent(from nousresearch.com). These operations are performed using official installer scripts for these respective developer tools. - [COMMAND_EXECUTION]: The skill uses shell commands to manage the environment, including directory creation, binary symlinking, and structural modification of configuration files using a helper Python script.
- [PERSISTENCE]: The skill implements persistence by modifying the shell configuration (
.bashrc) and the platform-specific.replitenvironment settings to ensure the installed tools remain available across container restarts.
Audit Metadata