skills/trancee/skills/maude/Gen Agent Trust Hub

maude

Pass

Audited by Gen Agent Trust Hub on Oct 14, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill provides instructions for downloading official Maude binaries and documentation from well-known academic and project sources, including the University of Malaga, University of Illinois, and the official maude-lang GitHub repository. These references are documented neutrally and follow safe practices for formal methods software procurement.
  • [COMMAND_EXECUTION]: The scripts/run-maude.py file is a utility for executing the Maude interpreter. It uses standard Python subprocess.run with list-based arguments, effectively avoiding shell injection vulnerabilities. The script implements security best practices such as wall-clock timeouts and strict output validation.
  • [SAFE]: The instructions in SKILL.md and the reference files demonstrate significant security awareness. They explicitly advise against using high-risk Maude flags like -trust, -allow-processes, and -allow-files unless a task is specifically reviewed, ensuring that the interpreter operates within a restricted trust boundary by default.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 14, 2026, 05:27 PM