code-exec-skills

Pass

Audited by Gen Agent Trust Hub on Mar 31, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The documentation for Google Colab and Nix-based environments includes placeholder examples for downloading datasets via wget and fetching external resources from GitHub repositories (e.g., Hugging Face and NixOS). These are used for educational purposes to demonstrate tool integration.
  • [COMMAND_EXECUTION]: The skills provide extensive examples of using shell commands (!), Makefiles, and the Python subprocess module to automate environment setup, install system packages, and execute data processing pipelines across various platforms.
  • [DATA_EXFILTRATION]: The guides document the legitimate handling of sensitive information required by the tools, such as mounting Google Drive for persistent storage in Colab and managing the kaggle.json API token for dataset access. These instructions follow industry-standard security practices for the specific platforms.
  • [REMOTE_CODE_EXECUTION]: The skills demonstrate how to install software directly from remote sources, including PyPI, NPM, and GitHub repositories, as part of setting up reproducible research environments.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 31, 2026, 10:16 PM
Security Audit — agent-trust-hub — code-exec-skills