skills/zentryhq/zframes/zframes-brief/Gen Agent Trust Hub

zframes-brief

Pass

Audited by Gen Agent Trust Hub on Jul 1, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill invokes the zframes CLI via shell commands to obtain market data snapshots.
  • Evidence: Instructions to call npx zframes@latest or pnpm zframes within the analysis loop described in SKILL.md.
  • [EXTERNAL_DOWNLOADS]: The skill may fetch the zframes package from the npm registry when using npx.
  • Evidence: The use of npx zframes@latest ensures the runner has the required tool. This package is a vendor-specific resource for the zentryhq author.
  • [SAFE]: Data operations are restricted to localized configuration directories and a specific analysis log file (daily-analysis.json). The skill includes rules that prevent it from editing the primary dashboard layout without user approval.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 1, 2026, 09:16 AM
Security Audit — agent-trust-hub — zframes-brief