debugging-with-opensrc
Pass
Audited by Gen Agent Trust Hub on May 6, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill uses
bun run opensrc:useandbun run opensrc:syncto fetch source code from well-known repositories on GitHub and packages from NPM. This behavior is consistent with the skill's stated purpose of providing a local environment for library debugging. - [COMMAND_EXECUTION]: Instructs the agent to execute shell commands including
bun run,opencode debug, andperl -e 'exec @ARGV'. These commands are part of the platform's infrastructure used for environment synchronization, skill debugging, and running non-interactive tests. - [DATA_EXPOSURE]: Uses MCP tools (
mcp_read,mcp_grep,mcp_ck_semantic_search) to access and search library source code within theopensrc/directory. This is the intended primary functionality of the skill to aid developer understanding of internal library logic.
Audit Metadata