corridorkey-green-screen
Pass
Audited by Gen Agent Trust Hub on Mar 17, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions for downloading essential components from well-known sources:
- Fetches model weights and weights for optional modules (GVM, VideoMaMa) from Hugging Face (huggingface.co).
- Downloads the 'uv' package manager from its official domain (astral.sh).
- [REMOTE_CODE_EXECUTION]: A remote code execution pattern is used for environment setup:
- The command 'curl -LsSf https://astral.sh/uv/install.sh | sh' is used to install the 'uv' package manager. This is an industry-standard installation method for this utility and originates from a reputable technology provider.
Audit Metadata