flow-next-ralph-init
Pass
Audited by Gen Agent Trust Hub on Feb 17, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION] (SAFE): The skill executes local shell commands including
git rev-parse,mkdir,cp, andchmod. These are used appropriately to resolve the repository root, create directories, and deploy internal scripts. - [EXTERNAL_DOWNLOADS] (SAFE): No remote downloads or network requests (e.g., via
curlorwget) are present. All files are sourced from the local${CLAUDE_PLUGIN_ROOT}. - [PRIVILEGE_ESCALATION] (SAFE): The skill uses
chmod +xto make the newly deployed scripts executable. This is standard behavior for a scaffolding tool and does not involvesudoor unauthorized permission changes. - [DATA_EXPOSURE] (SAFE): The skill creates a temporary backup of
config.envin/tmp/during updates to preserve user settings. It does not access sensitive system paths like SSH keys or cloud credentials.
Audit Metadata