delegate-setup

Pass

Audited by Gen Agent Trust Hub on Aug 27, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes local implementer CLIs (e.g., claude, codex, grok, etc.) to discover versions and authentication status. These are standard administrative probes limited to installed software on the user's system.
  • [COMMAND_EXECUTION]: Uses git commands (e.g., git rev-parse --show-toplevel) to identify project boundaries and securely manage project-specific configuration.
  • [SAFE]: Configuration management follows best practices, including atomic writes via temporary files and integrity checks using SHA-256 hashes to ensure project-level configurations are trusted by the user before use.
  • [SAFE]: The usage scan feature is designed for privacy, only performing stat operations on session metadata (counts and timestamps) without opening or reading the contents of user conversation files.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 27, 2026, 08:23 AM
Security Audit — agent-trust-hub — delegate-setup