setup-dev
Pass
Audited by Gen Agent Trust Hub on Feb 24, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches the Homebrew installation script from the official Homebrew GitHub repository, which is a well-known and trusted service.
- [EXTERNAL_DOWNLOADS]: The skill downloads the
devenvinstallation script from the official Sentry GitHub organization (getsentry/devenv), which matches the skill's author context. - [REMOTE_CODE_EXECUTION]: The skill executes installation scripts via
curl | bash. While this pattern is often flagged, these specific sources (Homebrew and Sentry) are verified as trusted organizations or well-known services. - [COMMAND_EXECUTION]: The skill runs various local system commands to verify environment state, install Xcode Command Line Tools, and manage Docker services via OrbStack or Colima.
- [SAFE]: The skill modifies shell configuration files (
~/.zshrc,~/.bashrc) solely to add the vendor's tools to the system PATH and configuredirenv, which is standard and expected behavior for development environment management.
Audit Metadata