dev-local
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill invokes a local shell script (
scripts/dev-local.sh) with various subcommands (up,down,status,logs,restart,attach,cli,reset) to manage the development environment. - [SAFE]: The skill demonstrates secure development practices by using a sandboxed home directory (
HOME=scripts/.dev-home) for the local CLI. This prevents the development process from accessing or overwriting the user's production configuration file located at~/.treg/config.json. - [COMMAND_EXECUTION]: It utilizes the
uvtool for Python dependency management and execution (uv run,uv sync), which is a standard practice in modern Python development. - [SAFE]: The skill's functionality is consistent with its stated purpose of providing a local dev stack, and no evidence of data exfiltration, obfuscation, or malicious injection was found.
Audit Metadata