agentsync
Pass
Audited by Gen Agent Trust Hub on Jun 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to use CLI commands to manage configuration files.
- Evidence: The agent is guided to run
agentsync sync,agentsync add,agentsync update, andagentsync resolveto synchronize and scaffold the.ai/src/directory. - [EXTERNAL_DOWNLOADS]: References the execution of external tools from well-known providers.
- Evidence: The skill documentation suggests using
npx -y @anthropic/mcp-playwrightto set up Model Context Protocol (MCP) servers, utilizing a package from a well-known organization. - [SAFE]: The skill includes instructions and examples that promote security best practices.
- Evidence: Provides examples of configuring tool permissions to deny access to sensitive files like
.envand specifies path sanitization for theagentsync addcommand to prevent traversal issues. - [SAFE]: Documentation of dynamic context injection syntax is provided for educational purposes.
- Evidence: The description of the
!shell commandsyntax inSKILL.mdis for authoring custom slash commands in supported tools and does not trigger execution within this skill's own prompt context.
Audit Metadata