aixyz-on-openclaw
Pass
Audited by Gen Agent Trust Hub on Mar 22, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches the installation script for the Bun runtime from the official well-known domain
bun.sh. - [COMMAND_EXECUTION]: Executes the downloaded Bun installation script via shell piping (
bashon Unix/macOS oriexon Windows). - [COMMAND_EXECUTION]: Utilizes
bunx(Bun's package runner) to execute thecreate-aixyz-appscaffolding tool to set up project structures. - [EXTERNAL_DOWNLOADS]: Instructions include downloading the
use-agentlyskill from the vendor's official GitHub repository (github.com/agentlyhq/use-agently). - [COMMAND_EXECUTION]: Mentions using
npx ngrokfor local tunnel testing, which is a standard developer practice for testing webhooks and connectivity.
Audit Metadata