gaud-mode
Pass
Audited by Gen Agent Trust Hub on May 8, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill manages its own lifecycle through update and upgrade scripts.
gaud-mode-update-checkretrieves version information from the vendor's official GitHub repository atraw.githubusercontent.com/builtby-win/skills. Thegaud-mode-upgradescript uses standard tools likenpxorgitto refresh the skill fromgithub.com/builtby-win/skills.git. - [COMMAND_EXECUTION]: The skill heavily utilizes bash and Python scripts to automate complex tmux session management. The
gaud-tmux-layouttool handles window tagging and pane management, incorporating input validation (assert_safe_token) to prevent common command injection patterns in tmux metadata. - [REMOTE_CODE_EXECUTION]: The
gaud-poll-installscript facilitates the setup of thegaud-pollhelper binary. It supports both building from source usingbunand decompressing a binary shipped with the skill. These operations are restricted to the vendor's infrastructure and the local environment, following documented installation patterns. - [DATA_EXFILTRATION]: The
gaud-agent-usageutility reads local configuration files (~/.config/gaud.config.jsonl) and usage snapshots (e.g., fromusage-cache.json) to provide the agent with real-time quota information. This data is used solely for local agent selection logic and is not transmitted to external endpoints.
Audit Metadata