fleet-maintenance
Pass
Audited by Gen Agent Trust Hub on Aug 5, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses a variety of scripts to audit and configure system state, including account management and permission hardening. It utilizes tools like
dsclfor user inventory andchmodto secure sensitive configuration files. - [EXTERNAL_DOWNLOADS]: Software updates are performed using well-known package managers (Homebrew and npm). The skill also verifies the 1Password CLI binary against its official Apple Developer ID signature.
- [REMOTE_CODE_EXECUTION]: Supports remote fleet management by piping local maintenance scripts to remote hosts via SSH for execution.
- [DATA_EXPOSURE]: Accesses system-level data and security configurations (SSH keys, 1Password tokens) to ensure they meet the defined fleet policy, with explicit logic to prevent secret values from being stored in shared inventory logs.
Audit Metadata