review-agent-setup
Pass
Audited by Gen Agent Trust Hub on Apr 28, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs users to install an external plugin and run utilities via npx.
- Fetches the
wshobson/agents/review-agent-governanceplugin, which is a resource provided by the skill author. - Uses
npx @veritasacta/verifyto perform offline verification of audit receipts. - Uses
npx protect-mcp@0.5.5for policy evaluation during tool calls. - [COMMAND_EXECUTION]: The skill provides configuration examples and manual setup steps that involve executing shell commands.
- Instructions include using
touch,rm,mkdir, andechofor local environment management (e.g., managing a flag file for approvals and updating.gitignore). - Provides a configuration snippet for shell hooks that execute
npx protect-mcpto evaluate agent actions against a Cedar policy before execution.
Audit Metadata