cross-agent-install-smoke
Pass
Audited by Gen Agent Trust Hub on Jul 5, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
subprocess.runacross several Python scripts (scripts/check.py,scripts/dry_run.py, andscripts/local_smoke.py) to execute internal repository tools (wagents) and theuvpackage manager. - Evidence: All subprocess calls use list-based arguments rather than string-based shell execution, which significantly reduces the risk of command injection.
- Intent: The commands are restricted to performing dry-runs and validation checks within the current repository context.
- [SAFE]: Environment isolation is enforced during the smoke testing phase.
- Evidence: The
scripts/local_smoke.pyscript creates a temporary directory and sets theHOMEenvironment variable to this location. This prevents the execution from reading or writing to the user's actual home directory credentials or configuration files. - [SAFE]: Potentially invasive tests are protected by an environment variable gate.
- Evidence: The Phase 2 smoke tests in
scripts/local_smoke.pywill only execute if theINSTALL_SMOKE=1environment variable is present, ensuring that users do not accidentally run more intensive checks without intent.
Audit Metadata