soia-env-claude-cli-install
Pass
Audited by Gen Agent Trust Hub on Aug 8, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
subprocess.runinscripts/inspect_cli.pyto execute the localclaudebinary with--versionand--helpflags for installation verification. It also executesnpm prefix -gto resolve global installation paths. These operations are restricted to environment discovery and verification. - [EXTERNAL_DOWNLOADS]: The
scripts/check_latest.pyscript retrieves version metadata from official package registries (registry.npmjs.org,pypi.org) and GitHub. These requests target well-known services to check for updates and do not involve the execution of untrusted remote content. - [SAFE]: The instructions and scripts are designed with security in mind, explicitly directing the agent to avoid reading credential files like
~/.claude/settings.jsonand instead guiding the user toward official browser-based authentication flows.
Audit Metadata