skills/yan-labs/yan-skills/gt/Gen Agent Trust Hub

gt

Pass

Audited by Gen Agent Trust Hub on Jul 30, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The scripts/gt.py script performs an automated setup during its first execution. It creates a virtual environment in the user's home directory (~/.cache/gt-skill/venv) and installs the pytrends and tabulate libraries from the official Python Package Index (PyPI). These packages are well-established tools for Google Trends API interaction and data visualization, respectively.
  • [COMMAND_EXECUTION]: The skill utilizes subprocess.run to interface with the opencli tool and to manage the local environment setup. These implementations use structured argument lists, which is a secure practice that avoids shell command injection vulnerabilities. The script also employs os.execve to restart itself within the context of the newly created virtual environment; this is a standard technique for ensuring correct dependency resolution in standalone scripts.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 30, 2026, 09:09 AM
Security Audit — agent-trust-hub — gt