tzst
Pass
Audited by Gen Agent Trust Hub on Oct 5, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions to download the
tzsttool using standard package managers (pip,uv) and links to the official GitHub releases of the author (xixu-me). These are legitimate installation methods for the tool's intended purpose. - [COMMAND_EXECUTION]: The skill facilitates the execution of the
tzstCLI for archive management (create, extract, list, test). It explicitly recommends security best practices, such as defaulting to--filter datato prevent extraction vulnerabilities from untrusted archives and advising against thefully_trustedfilter unless the source is known. - [SAFE]: The skill includes preflight checks (
--version,--help) and robust error handling guidance for automation, such as requiring non-interactive conflict resolution when using machine-readable JSON output.
Audit Metadata