hv-analysis Audit report.

Warnings

• Dependency or permission surface needs review
• Permission surface may require sandboxing
• The skill instructs to install Python dependencies with --break-system-packages, which may override system packages and pose a minor system stability risk, but it's a common practice in containerized environments and not inherently destructive.
• The skill relies heavily on sub-agent web search capabilities, which could potentially be misused if the agent environment lacks proper sandboxing, but no explicit dangerous commands or exfiltration paths are present.
• The SKILL.md does not explicitly mention the MIT license, but the repository license is MIT, so compliance is acceptable.
• Quality score needs review
• Permission surface needs review: shell or command execution, filesystem or document access
• Dependency/runtime risk: command execution surface, external package install surface
• Permission surface: shell or command execution, filesystem or document access

Method

This report combines public metadata, AI review output, repository freshness, install readiness, OpenAgentSkill events, quality scoring, trust checks, and the agent safety gate. It is not a full source-code security review.