wizard

Pass

Audited by Gen Agent Trust Hub on Aug 12, 2026

Risk Level: SAFE
Full Analysis
  • [DATA_EXFILTRATION]: The skill is designed to capture and store sensitive credentials (e.g., Stripe keys). It handles these securely by using ask_secret for masked input and writing to local .env files or using the official gh CLI to set GitHub Secrets. This behavior is the primary intended purpose and follows security best practices for secret handling.
  • [COMMAND_EXECUTION]: The generated bash scripts execute common local developer tools such as gh and xdg-open. These operations are transparently defined in the template.sh library and are necessary for the skill's interactive functionality.
  • [REMOTE_CODE_EXECUTION]: No evidence of remote code execution, unauthorized downloads, or piped bash execution from unknown sources was found. The skill operates entirely through locally generated scripts.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 12, 2026, 02:15 AM
Security Audit — agent-trust-hub — wizard