skills/ymd38/dev-skills/yds-setup/Gen Agent Trust Hub

yds-setup

Pass

Audited by Gen Agent Trust Hub on Aug 26, 2026

Risk Level: SAFEREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [REMOTE_CODE_EXECUTION]: The skill executes a remote shell script using a curl | bash pattern to automate project setup. The script is fetched from the author's official repository at https://raw.githubusercontent.com/ymd38/dev-skills/main/harness/scripts/install.sh. While this pattern is generally high-risk, it is used here as the primary installation mechanism for the author's own development harness.\n- [COMMAND_EXECUTION]: The skill instructs the agent to execute various shell commands for project initialization, including git operations, package manager commands (npm, pip, go, uv), and the main installation script.\n- [EXTERNAL_DOWNLOADS]: Fetches installation scripts and project templates from the author's GitHub repository (ymd38/dev-skills) and installs additional tools via npx.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 26, 2026, 11:18 AM
Security Audit — agent-trust-hub — yds-setup