execute
Pass
Audited by Gen Agent Trust Hub on May 20, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads and installs well-known development tools and testing frameworks, such as vitest, pytest, playwright, and chromux, from official registries when necessary for thorough verification. These operations are standard for development environments and target trusted services.
- [COMMAND_EXECUTION]: The orchestrator executes standard project build and test commands (e.g., npm run build, go build, make) and uses local utilities like curl, psql, and sqlite3 to verify that implementations meet requirements. These actions are performed to confirm software behavior during the development cycle.
- [SAFE]: All identified behaviors, including the use of the vendor's hoyeon-cli tool and the management of internal state in the ~/.hoyeon directory, are consistent with the skill's stated purpose as a development orchestrator. The skill demonstrates security-conscious practices, such as avoiding modifications to lockfiles during automated testing setup.
Audit Metadata