tracekit-releases
Pass
Audited by Gen Agent Trust Hub on Apr 15, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches a CLI installation script from the TraceKit vendor's official GitHub repository (raw.githubusercontent.com/Tracekit-Dev/cli).
- [REMOTE_CODE_EXECUTION]: Executes the TraceKit CLI installation script via a shell pipe; this is a standard and expected installation method for the vendor's tool.
- [COMMAND_EXECUTION]: Invokes the TraceKit CLI tool for release management, commit association, and deployment tracking.
- [CREDENTIALS_UNSAFE]: Correctly instructs the user to manage authentication tokens via environment variables and secret managers rather than hardcoding them, adhering to security best practices.
- [PROMPT_INJECTION]: Contains instructions to prioritize a specific authentication flow (tracekit-auth skill) over manual user setup. This is a legitimate flow-control instruction for the agent's task and does not constitute a malicious concealment of behavior or a safety bypass.
Audit Metadata