rp-setup-discovery
Pass
Audited by Gen Agent Trust Hub on Jul 1, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill provides instructions for the user to run standard developer commands such as
brew install ngrokandngrok http. These are intended for setting up an HTTPS tunnel to local media files during migration, which is a legitimate and documented use case for the tool. - [CREDENTIALS_UNSAFE]: The instructions include a reference to an ngrok authtoken but correctly use a placeholder (
<YOUR_AUTHTOKEN>), encouraging the user to manage their own secrets rather than hardcoding them. - [EXTERNAL_DOWNLOADS]: The skill references installing the
ngrokutility via Homebrew. Homebrew and ngrok are well-known, trusted developer services. - [DATA_EXPOSURE]: The skill reads project-specific mapping files (
mapping-plan.md,mapping-summary.md) to derive setup requirements. This is the primary intended function of the skill and does not involve exfiltration to external domains.
Audit Metadata