qedgen
Pass
Audited by Gen Agent Trust Hub on Jul 9, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: The
install.shscript, executed during the post-installation phase of the Node.js package, downloads the official Rust installation script fromhttps://sh.rustup.rs. This is a standard and well-known service used to set up the Rust programming environment required by the skill. - [EXTERNAL_DOWNLOADS]: The
install.shscript fetches theelan-init.shscript from the officialleanproverrepository on GitHub to install the Lean 4 version manager. This is a trusted resource essential for the skill's formal verification capabilities. - [SAFE]: The skill requires a Mistral AI API key (
MISTRAL_API_KEY) to be provided as an environment variable to interact with the Mistral completions API. This is a standard and legitimate practice for skills that integrate with external AI services to perform specialized tasks like theorem proving. - [SAFE]: The local command executions identified in the codebase, such as
cargo buildandlake build, are used to compile the skill's CLI tool and verify mathematical proofs locally. These actions are consistent with the skill's primary function of program verification.
Audit Metadata