unopim-exec
Pass
Audited by Gen Agent Trust Hub on Jul 31, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The
detect-env.shscript executes local diagnostic commands includingdocker,python3, andgetentto probe the environment and verify hostname resolution. These operations are restricted to local environment detection. - [SAFE]: The skill documentation includes explicit warnings in the 'Common Mistakes' section advising against baking detected values or credentials into scripts or committed files, which demonstrates a security-conscious design.
- [DATA_EXPOSURE]: The script reads local configuration files (
.env,docker-compose.yml) to resolve the application environment. The parsing logic uses restrictive regular expressions inawkto sanitize values and prevent injection from these files. - [REMOTE_CODE_EXECUTION]: The script uses
python3 -cfor DNS resolution. The Python code is a static, hardcoded snippet, and the hostname variable is passed as a command-line argument rather than being interpolated into the script string, preventing shell injection.
Audit Metadata