orient
Pass
Audited by Gen Agent Trust Hub on May 3, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill uses
uvxto download and run theshowboattool from the Python Package Index (PyPI). This is a standard method for executing ephemeral developer tools and targets a well-known, official package registry. - [COMMAND_EXECUTION]: Employs shell commands via the
Bashtool to perform repository exploration. This includes usingfindto map directory structures,git logto analyze development history, andcat/sedto extract code snippets for documentation. - [DATA_EXFILTRATION]: The skill reads project manifest files (e.g., package.json, pyproject.toml) and source code to generate summaries. While it performs network operations via
uvxto fetch tools, no project data or sensitive information is transmitted to external or unauthorized endpoints.
Audit Metadata