ecosystem-orchestration
Pass
Audited by Gen Agent Trust Hub on Apr 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill includes a Python script (
scripts/install_all.py) that executes shell commands to manage platform dependencies. Evidence: The script usessubprocess.runto call theskills installcommand for a predefined list of ecosystem components. The input is hardcoded, which prevents command injection.\n- [EXTERNAL_DOWNLOADS]: The automated setup process involves downloading 15 additional skills. Evidence: Theinstall_all.pyscript references names such ascheckpoint-guardian,error-recovery, andtask-decomposer, which are installed via the platform's internal package management system.
Audit Metadata