codearts-repo
Pass
Audited by Gen Agent Trust Hub on Apr 21, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill defines shell command sequences for the agent to execute in order to parse local git configuration. Specifically, it uses
grepandsedpipelines to extract a 32-character hexadecimal project ID from the output ofgit remote -v. - [EXTERNAL_DOWNLOADS]: The skill metadata specifies a dependency on an external binary,
codearts-cli, which is required for the skill to perform its intended operations on the Huawei Cloud CodeArts platform. - [DATA_EXFILTRATION]: To automate project identification, the skill reads local git repository metadata (remote URLs). This data is used locally to populate command arguments for the project-specific CLI tool.
Audit Metadata