amber-lang
Pass
Audited by Gen Agent Trust Hub on Mar 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill describes the core functionality of the Amber language, which is designed to execute shell commands directly via the
$ ... $syntax. Examples show this used for common tasks like file operations, process management, and system updates. - [EXTERNAL_DOWNLOADS]: The
LSP Installerexample inreferences/examples.mddemonstrates fetching release metadata and binaries from GitHub's official API (api.github.com) usingcurland thefile_downloadlibrary function. - [REMOTE_CODE_EXECUTION]: The skill documentation explains how to download, extract, and install third-party binaries (e.g.,
rust-analyzer,ruff) from remote sources, which is a standard procedure for the development tools it describes. - [CREDENTIALS_UNSAFE]: In
references/stdlib-env.md, the documentation for environment constants includes an example using a hardcoded placeholder value (secret123) for anAPI_KEY. This is provided as a syntax demonstration for the standard library.
Audit Metadata