codeclimate-config
Pass
Audited by Gen Agent Trust Hub on Aug 12, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions to download the Qlty CLI installer from
https://qlty.sh. This is the official domain for the Qlty service described in the skill. - [REMOTE_CODE_EXECUTION]: The skill includes common installation patterns that download and immediately execute a shell script (
curl https://qlty.sh -o install-qlty.sh && sh install-qlty.sh) or PowerShell command (iwr https://qlty.sh | iex). While these patterns involve remote code execution, they target the official tool associated with the skill's primary purpose. - [COMMAND_EXECUTION]: The skill provides various commands for the
qltyCLI tool, such asqlty init,qlty check, andqlty smells. These are standard operational commands for the documented utility.
Audit Metadata