diagnosing-dream-builds
Pass
Audited by Gen Agent Trust Hub on May 3, 2026
Risk Level: SAFEDATA_EXFILTRATIONCOMMAND_EXECUTION
Full Analysis
- [DATA_EXFILTRATION]: The skill provides instructions to extract a GitHub authentication token from the local configuration file located at
~/tau.yaml. This sensitive data is used to authenticate requests to a local service onlocalhostprovided by the vendor, which aligns with the skill's primary purpose of diagnosing local builds. - [COMMAND_EXECUTION]: The skill executes multiple shell-based commands, including
awk,curl, andpython3, as well as vendor-specific toolstauanddream. These commands are used to discover local port configurations, query job statuses, and download log files into the project directory.
Audit Metadata