agentic-qa-onboard
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSCREDENTIALS_UNSAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill provides instructions to open educational presentation URLs in the user's default browser using system commands like
open,xdg-open, orstart. This functionality is gated by a requirement for explicit user consent. - [EXTERNAL_DOWNLOADS]: Documentation references external resources from the vendor's official GitHub Pages domain (
upex-galaxy.github.io) and mentions the installation of utility skills from trusted organizations including Anthropics and Vercel. - [CREDENTIALS_UNSAFE]: The skill identifies several sensitive environment variables (e.g., Jira and Xray API credentials) necessary for the repo's operation. It follows security best practices by instructing users to manage these secrets within a gitignored
.envfile rather than committing them to the repository.
Audit Metadata