factory-files

Pass

Audited by Gen Agent Trust Hub on Aug 23, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes a bundled Python script (validate_factory_files.py) to validate local configuration files. This script uses standard Python libraries and runs within the user's local environment.
  • [EXTERNAL_DOWNLOADS]: The skill fetches validation schemas from the vendor's official domain (app.warp.dev) using curl. This is a standard operation to ensure the skill uses the most up-to-date definitions from the service provider.
  • [DATA_EXFILTRATION]: The skill transmits repository configuration files to the vendor's API (app.warp.dev) for validation. This is the core functionality of the tool. The script includes a security safeguard (_leaves_factory_root) that explicitly prevents the agent from following symlinks to access or upload sensitive files (like SSH keys or credentials) located outside the project directory.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 23, 2026, 04:58 AM
Security Audit — agent-trust-hub — factory-files