pipes-sdk
Pass
Audited by Gen Agent Trust Hub on May 12, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions to download and install essential development tools from well-known and reputable services. This includes the Node Version Manager (NVM) from its official GitHub repository, the Docker installation script from docker.com, and the Bun runtime from bun.sh. These operations are standard for setting up a blockchain development environment.
- [REMOTE_CODE_EXECUTION]: The environment setup guide includes standard patterns for installing development utilities (e.g.,
curl | bashfor NVM and Bun). These scripts originate from authoritative and well-known technology providers, aligning with the primary purpose of configuring a developer workspace. - [COMMAND_EXECUTION]: The skill utilizes administrative commands (
sudo) to install system-level dependencies like Docker on Linux and to manage system services. It also uses common shell utilities (sed, grep, mkdir) for legitimate configuration tasks, such as patching project files and organizing directory structures. - [DATA_EXFILTRATION]: Instructions include managing environment variables in
.envfiles and configuring shell profiles (.bashrc,.zshrc). These are documented as standard practices for local development and path configuration, with no evidence of sensitive data being transmitted to unauthorized external domains. - [PROMPT_INJECTION]: The skill maintains a strictly professional and instructional tone throughout its documentation. It contains no attempts to bypass safety filters, override agent constraints, or extract system prompts.
Audit Metadata