install-chief
Pass
Audited by Gen Agent Trust Hub on Apr 21, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches version tags and clones the framework source code from the vendor's official GitHub repository at
github.com/thaitype/chief-agent-framework.git. - [REMOTE_CODE_EXECUTION]: Executes a shell script (
scripts/setup.sh) downloaded from the remote repository to automate the framework's internal configuration and setup. - [COMMAND_EXECUTION]: Performs extensive filesystem management using shell commands like
cp,ln,mkdir, andrmto install core files and establish symlinks for agent integrations (e.g., Claude Code, GitHub Copilot). - [COMMAND_EXECUTION]: Runs
git ls-remoteto identify the latest stable version and executes string replacements within project files to configure model names based on user input.
Audit Metadata