victoriatraces-query
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements best security practices by explicitly avoiding standard command-line credential exposure. It utilizes the
--configparameter ofcurlto point to a restricted permissions config file (VM_CURL_CONFIG), completely preventing secrets from being passed as clear text arguments or printed in logs. - [COMMAND_EXECUTION]: The execution of command-line tools is fully restricted to the
allowed-toolsspecification block (Bash(curl),Bash(jq),Bash(date)). No dynamic command interpolation or unvetted parameter generation occurs. - [DATA_EXFILTRATION]: Network activity is restricted entirely to interaction with user-defined target infrastructure via the
$VM_TRACES_URLenvironment parameter. No tracking endpoints or arbitrary domains are present. - [NO_CODE]: The utility functions purely on documentation instructions and inline bash snippets, without packaging external scripts, dynamic libraries, binaries, or unpinned manager dependencies.
Audit Metadata