factory-files
Pass
Audited by Gen Agent Trust Hub on Aug 23, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill executes a bundled Python script (
validate_factory_files.py) to validate local configuration files. This script uses standard Python libraries and runs within the user's local environment. - [EXTERNAL_DOWNLOADS]: The skill fetches validation schemas from the vendor's official domain (
app.warp.dev) usingcurl. This is a standard operation to ensure the skill uses the most up-to-date definitions from the service provider. - [DATA_EXFILTRATION]: The skill transmits repository configuration files to the vendor's API (
app.warp.dev) for validation. This is the core functionality of the tool. The script includes a security safeguard (_leaves_factory_root) that explicitly prevents the agent from following symlinks to access or upload sensitive files (like SSH keys or credentials) located outside the project directory.
Audit Metadata