orient

Pass

Audited by Gen Agent Trust Hub on May 3, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill uses uvx to download and run the showboat tool from the Python Package Index (PyPI). This is a standard method for executing ephemeral developer tools and targets a well-known, official package registry.
  • [COMMAND_EXECUTION]: Employs shell commands via the Bash tool to perform repository exploration. This includes using find to map directory structures, git log to analyze development history, and cat/sed to extract code snippets for documentation.
  • [DATA_EXFILTRATION]: The skill reads project manifest files (e.g., package.json, pyproject.toml) and source code to generate summaries. While it performs network operations via uvx to fetch tools, no project data or sensitive information is transmitted to external or unauthorized endpoints.
Audit Metadata
Risk Level
SAFE
Analyzed
May 3, 2026, 07:47 PM