ecosystem-orchestration

Pass

Audited by Gen Agent Trust Hub on Apr 16, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill includes a Python script (scripts/install_all.py) that executes shell commands to manage platform dependencies. Evidence: The script uses subprocess.run to call the skills install command for a predefined list of ecosystem components. The input is hardcoded, which prevents command injection.\n- [EXTERNAL_DOWNLOADS]: The automated setup process involves downloading 15 additional skills. Evidence: The install_all.py script references names such as checkpoint-guardian, error-recovery, and task-decomposer, which are installed via the platform's internal package management system.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 16, 2026, 06:36 AM