unopim-exec

Pass

Audited by Gen Agent Trust Hub on Jul 31, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The detect-env.sh script executes local diagnostic commands including docker, python3, and getent to probe the environment and verify hostname resolution. These operations are restricted to local environment detection.
  • [SAFE]: The skill documentation includes explicit warnings in the 'Common Mistakes' section advising against baking detected values or credentials into scripts or committed files, which demonstrates a security-conscious design.
  • [DATA_EXPOSURE]: The script reads local configuration files (.env, docker-compose.yml) to resolve the application environment. The parsing logic uses restrictive regular expressions in awk to sanitize values and prevent injection from these files.
  • [REMOTE_CODE_EXECUTION]: The script uses python3 -c for DNS resolution. The Python code is a static, hardcoded snippet, and the hostname variable is passed as a command-line argument rather than being interpolated into the script string, preventing shell injection.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 31, 2026, 05:36 AM