claude-code-ops

Pass

Audited by Gen Agent Trust Hub on Jun 21, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: No security vulnerabilities were detected in the skill instructions or scripts.
  • [COMMAND_EXECUTION]: The Python utility scripts/validate-hooks-json.py executes a local git command via subprocess.run to identify the project root, which is a safe implementation for developer tools.
  • [SAFE]: The skill uses the dynamic context injection syntax in SKILL.md to gather project git information, which is a legitimate use of documented platform features for developer workflows.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 21, 2026, 07:50 PM
Security Audit — agent-trust-hub — claude-code-ops