skills/fusengine/agents/solid-astro/Gen Agent Trust Hub

solid-astro

Pass

Audited by Gen Agent Trust Hub on Apr 3, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes standard Unix utilities such as grep, find, awk, wc, and xargs to perform static analysis on the local codebase. These commands are used legitimately to enforce architectural rules like file line limits and code duplication checks (DRY enforcement).
  • [EXTERNAL_DOWNLOADS]: The documentation suggests using npx jscpd to detect code duplication. This is a common practice in JavaScript development to invoke the jscpd tool from the well-known public NPM registry.
  • [SAFE]: The skill implements a structured agent workflow using a TeamCreate mechanism to spawn specialized sub-agents (fuse-ai-pilot) for research and exploration. This approach promotes modularity and validation within the AI's internal processing environment without introducing external security vulnerabilities.
  • [SAFE]: No evidence of prompt injection, data exfiltration, or obfuscated code was found. The instructions focus entirely on project structure, TypeScript interface organization, and documentation standards (JSDoc).
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 3, 2026, 10:59 AM