gt
Pass
Audited by Gen Agent Trust Hub on Jul 30, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: The
scripts/gt.pyscript performs an automated setup during its first execution. It creates a virtual environment in the user's home directory (~/.cache/gt-skill/venv) and installs thepytrendsandtabulatelibraries from the official Python Package Index (PyPI). These packages are well-established tools for Google Trends API interaction and data visualization, respectively. - [COMMAND_EXECUTION]: The skill utilizes
subprocess.runto interface with theopenclitool and to manage the local environment setup. These implementations use structured argument lists, which is a secure practice that avoids shell command injection vulnerabilities. The script also employsos.execveto restart itself within the context of the newly created virtual environment; this is a standard technique for ensuring correct dependency resolution in standalone scripts.
Audit Metadata