soia-env-workbuddy-install
Pass
Audited by Gen Agent Trust Hub on Aug 6, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes system tools such as
codesignandspctlon macOS to verify the authenticity and integrity of the downloaded application, ensuring it is correctly signed by the publisher. - [COMMAND_EXECUTION]: A bundled Python utility
scripts/record_install_progress.pyis executed to maintain a persistent audit log of the installation steps. The script includes security controls such as regex validation for identifiers and checks to prevent symlink attacks when writing to the local filesystem. - [EXTERNAL_DOWNLOADS]: The skill directs the agent to fetch installation packages exclusively from the official domain
workbuddy.cn. It explicitly forbids the use of third-party mirrors, unknown download scripts, or unofficial CLI-based updates.
Audit Metadata