embedding-ft
Pass
Audited by Gen Agent Trust Hub on Feb 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- COMMAND_EXECUTION (SAFE): The script
scripts/run-embedding-ft.shexecutescurlto send a POST request to a Supabase edge function. This is consistent with the skill's stated purpose of managing and troubleshooting theembedding_ftworker. - EXTERNAL_DOWNLOADS (SAFE): The script interacts with
supabase.coviacurl. As this is a standard operational endpoint for the described service and does not execute remote content as code, it is considered safe. - DATA_EXFILTRATION (SAFE): No sensitive local file paths (like SSH keys or AWS credentials) are accessed. The script only reads a user-provided JSON payload file.
- CREDENTIALS_UNSAFE (SAFE): There are no hardcoded API keys or tokens. The skill correctly prompts the user to provide a token via environment variables or CLI arguments.
Audit Metadata