Skills
Navigate
skills/trampoline-ai/avalanche/avalanche-demo-init/Gen Agent Trust Hub

avalanche-demo-init

Pass

Audited by Gen Agent Trust Hub on Jul 28, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The initialization script scripts/init_project.py uses the subprocess module to execute system commands necessary for workspace setup.
  • It invokes git clone to retrieve framework source code from the author's GitHub repositories.
  • It uses the uv tool for workspace initialization (uv init), dependency management (uv add), and environment synchronization (uv sync).
  • It utilizes npx (or alternative package runners like pnpx or bunx) to manage and install agent-specific skills at the project scope.
  • [EXTERNAL_DOWNLOADS]: The skill performs downloads of external code from repositories owned by the author (Trampoline-AI).
  • The framework repository https://github.com/Trampoline-AI/avalanche.git is cloned into a local directory for editable access.
  • The framework repository https://github.com/Trampoline-AI/predict-rlm.git is cloned into a local directory for editable access.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 28, 2026, 06:48 PM
Security Audit — agent-trust-hub — avalanche-demo-init