skills/builtby-win/skills/gaud-mode/Gen Agent Trust Hub

gaud-mode

Pass

Audited by Gen Agent Trust Hub on May 8, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill manages its own lifecycle through update and upgrade scripts. gaud-mode-update-check retrieves version information from the vendor's official GitHub repository at raw.githubusercontent.com/builtby-win/skills. The gaud-mode-upgrade script uses standard tools like npx or git to refresh the skill from github.com/builtby-win/skills.git.
  • [COMMAND_EXECUTION]: The skill heavily utilizes bash and Python scripts to automate complex tmux session management. The gaud-tmux-layout tool handles window tagging and pane management, incorporating input validation (assert_safe_token) to prevent common command injection patterns in tmux metadata.
  • [REMOTE_CODE_EXECUTION]: The gaud-poll-install script facilitates the setup of the gaud-poll helper binary. It supports both building from source using bun and decompressing a binary shipped with the skill. These operations are restricted to the vendor's infrastructure and the local environment, following documented installation patterns.
  • [DATA_EXFILTRATION]: The gaud-agent-usage utility reads local configuration files (~/.config/gaud.config.jsonl) and usage snapshots (e.g., from usage-cache.json) to provide the agent with real-time quota information. This data is used solely for local agent selection logic and is not transmitted to external endpoints.
Audit Metadata
Risk Level
SAFE
Analyzed
May 8, 2026, 04:50 AM