rye-universal-checkout
Pass
Audited by Gen Agent Trust Hub on Mar 2, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill includes a pre-defined command for the GitHub CLI (
gh) to facilitate user feedback.\n - Evidence:
gh issue create --repo rye-com/agent-skillsinSKILL.md.\n - Context: This is a legitimate support feature that requires explicit user confirmation before execution.\n- [EXTERNAL_DOWNLOADS]: The skill directs users to install official library dependencies from standard, well-known package registries.\n
- Evidence: Installation commands for
checkout-intentson npm, PyPI, and RubyGems inSKILL.mdandreferences/api-reference.md.\n - Context: These resources are provided by the vendor for interacting with their service and match the author context.\n- [CREDENTIALS_UNSAFE]: The documentation references authentication headers using standard placeholders rather than actual secrets.\n
- Evidence: Usage of
YOUR_API_KEYand the public Stripe test tokentok_visa.\n - Context: These are routine documentation practices for illustrating API usage and testing without exposing sensitive data.
Audit Metadata