wizard
Pass
Audited by Gen Agent Trust Hub on Aug 12, 2026
Risk Level: SAFE
Full Analysis
- [DATA_EXFILTRATION]: The skill is designed to capture and store sensitive credentials (e.g., Stripe keys). It handles these securely by using
ask_secretfor masked input and writing to local.envfiles or using the officialghCLI to set GitHub Secrets. This behavior is the primary intended purpose and follows security best practices for secret handling. - [COMMAND_EXECUTION]: The generated bash scripts execute common local developer tools such as
ghandxdg-open. These operations are transparently defined in thetemplate.shlibrary and are necessary for the skill's interactive functionality. - [REMOTE_CODE_EXECUTION]: No evidence of remote code execution, unauthorized downloads, or piped bash execution from unknown sources was found. The skill operates entirely through locally generated scripts.
Audit Metadata