ecosystem-api
Pass
Audited by Gen Agent Trust Hub on Mar 5, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/install_all.pyutilizes thesubprocessmodule to execute theskills installcommand. This is used to install a static list of API-related skills defined in the code. Because the skill names are hardcoded, there is no risk of arbitrary command injection from user-provided data. This is standard functionality for an ecosystem management skill.
Audit Metadata