ss-cli-agent-check
Pass
Audited by Gen Agent Trust Hub on Mar 19, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes
ss-cli token-status --jsonto retrieve the current authentication state. This is a standard operation for the vendor's tool to verify session validity. - [COMMAND_EXECUTION]: The provided script
scripts/agent-check.shuses standard shell utilities (grep, cut, tr, bc) to parse JSON and perform basic conditional logic. The script implements a 'fail-fast' mechanism that exits with a non-zero status if authentication is missing or expired. - [CREDENTIALS_UNSAFE]: The skill documentation correctly identifies security best practices by advising against storing secret values in files and recommending the use of
ss-cli runfor in-memory secret injection via environment variables. - [DATA_EXFILTRATION]: No network operations or data transmission to non-whitelisted or untrusted domains were detected. All operations are local to the user's environment and the Secret Server CLI.
Audit Metadata