ov-server-operate
Pass
Audited by Gen Agent Trust Hub on Apr 29, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches the
uvpackage manager installation script fromastral.sh. - [REMOTE_CODE_EXECUTION]: Executes the
uvinstallation script directly via a shell pipe (curl ... | sh). This is a standard installation method for this well-known developer tool. - [COMMAND_EXECUTION]: Utilizes various system commands for server lifecycle management, including process control (
kill,pkill,nohup), directory management (mkdir,rm -rf), and network connectivity tests (curl). The cleanup procedures include recommended backup steps and mandatory user confirmation prompts. - [DATA_EXPOSURE]: The skill manages configuration files at
~/.openviking/ov.confwhich are intended to store sensitive API keys for the Volcengine Ark platform. The instructions follow best practices by using placeholders and directing the user to provide their own credentials.
Audit Metadata