yds-setup
Pass
Audited by Gen Agent Trust Hub on Aug 26, 2026
Risk Level: SAFEREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill executes a remote shell script using a
curl | bashpattern to automate project setup. The script is fetched from the author's official repository athttps://raw.githubusercontent.com/ymd38/dev-skills/main/harness/scripts/install.sh. While this pattern is generally high-risk, it is used here as the primary installation mechanism for the author's own development harness.\n- [COMMAND_EXECUTION]: The skill instructs the agent to execute various shell commands for project initialization, including git operations, package manager commands (npm, pip, go, uv), and the main installation script.\n- [EXTERNAL_DOWNLOADS]: Fetches installation scripts and project templates from the author's GitHub repository (ymd38/dev-skills) and installs additional tools vianpx.
Audit Metadata