aquaria-docs

Pass

Audited by Gen Agent Trust Hub on Mar 1, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
  • [REMOTE_CODE_EXECUTION]: The skill includes a self-update routine triggered by the --update-skill flag in the droid command file. This routine uses curl to fetch an installation script from the author's official repository (Alcyone-Labs/agent-skills) and pipes it to bash. This is documented as a standard vendor-provided update mechanism for the skill's infrastructure.
  • [COMMAND_EXECUTION]: The skill is designed to run local shell commands using pnpm to perform documentation quality checks. These include pnpm run spellcheck, pnpm run linkcheck, and pnpm aquaria codegen for maintaining documentation standards and generating metadata.
  • [EXTERNAL_DOWNLOADS]: The skill references and downloads scripts and templates from the Alcyone-Labs GitHub organization. These operations are restricted to the author's own infrastructure and are used for skill maintenance and template synchronization.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 1, 2026, 06:42 PM