jazz-runtime-wasm-compat

Pass

Audited by Gen Agent Trust Hub on Mar 18, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The install.sh script executes npx @alcyone-labs/agent-skills, which fetches and runs the author's official management tool. As this is a recognized vendor resource, it is considered a legitimate administrative operation.
  • [CREDENTIALS_UNSAFE]: The documentation explicitly addresses the handling of accountSecret and JAZZ_WORKER_SECRET, providing security-positive instructions to keep these credentials in secure environment variables and never expose them to client-side bundles.
  • [COMMAND_EXECUTION]: The bin/jazz-runtime-wasm-compat script is a simple wrapper that outputs the paths to the documentation files using cat. This is a low-privilege, informative operation.
  • [SAFE]: The skill's primary function is educational and diagnostic, focusing on runtime invariants and import-order correctness for WASM-based crypto backends.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 18, 2026, 04:15 AM