mathodology-dev-test-release
Pass
Audited by Gen Agent Trust Hub on Sep 7, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONREMOTE_CODE_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The script
scripts/validate_repo.pycontains a bootstrap command that fetches an update script fromraw.githubusercontent.com/sweetcornna/mathodology. This is a vendor-owned resource used for project maintenance. - [REMOTE_CODE_EXECUTION]: The skill executes the downloaded updater script using
python3and triggers its self-test mode. It also includes instructions for usinguvx free-search-mcpto manage external search capabilities. - [COMMAND_EXECUTION]: The validation script utilizes
subprocess.check_outputto rungit ls-filesfor whitelist verification and usessubprocess.runto execute the updater script during self-testing. - [DATA_EXPOSURE_AND_EXFILTRATION]: The skill checks for the absence of secrets in final packages and manages a local cache directory for search results (
$HOME/.cache/search-mcp/downloads). No evidence of sensitive data exfiltration to unauthorized domains was found.
Audit Metadata