skills/tttpob/jcli/j-cli/Gen Agent Trust Hub

j-cli

Pass

Audited by Gen Agent Trust Hub on Sep 20, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill instructs the agent to install and use the j-cli tool (published as jupyter-jcli on PyPI). It executes shell commands for session management, kernel control, and code execution on a Jupyter server. All operations are standard for the tool's documented purpose of remote Jupyter interaction.
  • [DYNAMIC_CONTEXT_INJECTION]: The skill uses shell-command substitution $(j-cli serve-cmd ...) inside a nohup block to launch the Jupyter server. This is used safely to expand environment variables like $JCLI_JUPYTER_SERVER_TOKEN without hardcoding them in logs or command history.
  • [EXTERNAL_DOWNLOADS]: The skill recommends installation via uv tool install jupyter-jcli, which is a standard package management workflow from a public registry (PyPI). This is considered a safe dependency management practice.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 20, 2026, 05:48 AM
Security Audit — agent-trust-hub — j-cli