soia-env-claude-cli-install

Pass

Audited by Gen Agent Trust Hub on Aug 8, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses subprocess.run in scripts/inspect_cli.py to execute the local claude binary with --version and --help flags for installation verification. It also executes npm prefix -g to resolve global installation paths. These operations are restricted to environment discovery and verification.
  • [EXTERNAL_DOWNLOADS]: The scripts/check_latest.py script retrieves version metadata from official package registries (registry.npmjs.org, pypi.org) and GitHub. These requests target well-known services to check for updates and do not involve the execution of untrusted remote content.
  • [SAFE]: The instructions and scripts are designed with security in mind, explicitly directing the agent to avoid reading credential files like ~/.claude/settings.json and instead guiding the user toward official browser-based authentication flows.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 8, 2026, 09:05 AM
Security Audit — agent-trust-hub — soia-env-claude-cli-install