codearts-repo

Pass

Audited by Gen Agent Trust Hub on Apr 21, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill defines shell command sequences for the agent to execute in order to parse local git configuration. Specifically, it uses grep and sed pipelines to extract a 32-character hexadecimal project ID from the output of git remote -v.
  • [EXTERNAL_DOWNLOADS]: The skill metadata specifies a dependency on an external binary, codearts-cli, which is required for the skill to perform its intended operations on the Huawei Cloud CodeArts platform.
  • [DATA_EXFILTRATION]: To automate project identification, the skill reads local git repository metadata (remote URLs). This data is used locally to populate command arguments for the project-specific CLI tool.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 21, 2026, 07:08 AM