ucoz-provisioning-skill

Pass

Audited by Gen Agent Trust Hub on Jun 29, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill instructs the agent to execute shell commands to prepare the environment, including installing Node.js dependencies (npm install), browser binaries (npx playwright install chromium), and running the provisioning automation script (npm run provision).
  • [EXTERNAL_DOWNLOADS]: The skill downloads necessary dependencies from well-known registries, including the Playwright automation framework and the ucoz-mcp server from the NPM registry.
  • [REMOTE_CODE_EXECUTION]: The skill executes the ucoz-mcp server using npx and runs a local JavaScript script (ucoz-provision.cjs) to automate the web-based provisioning process on the uCoz platform.
  • [SAFE]: The skill incorporates multiple security best practices, such as explicitly instructing the agent not to store or replay passwords in chat history, using environment variables for secret management, and implementing redaction logic for sensitive outputs in the automation runner.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 29, 2026, 10:17 AM
Security Audit — agent-trust-hub — ucoz-provisioning-skill