social-quality-auditor

Pass

Audited by Gen Agent Trust Hub on Aug 20, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides a structured framework (ECHO) for auditing social media assets. It requires internal project references (e.g., auditor-runbook.md, scoring-semantics.md) to function fully.
  • [COMMAND_EXECUTION]: The skill uses git rev-parse --show-toplevel to resolve the project root directory path (AARON_SKILLS_ROOT). This is a standard and safe practice for local path resolution in development environments.
  • [DATA_EXPOSURE]: The skill reads project-specific governance files and asset packages provided by the user. It does not access sensitive system paths (like .ssh or .aws) or hardcoded credentials.
  • [PRIVILEGE_ESCALATION]: No privilege escalation patterns (like sudo or chmod 777) were detected. The persistence mechanism is restricted to a specific documentation path (memory/audits/social/) and requires explicit authorization.
  • [DYNAMIC_EXECUTION]: The skill mentions a validation script (validate-audit-artifact.py), which is a standard utility for checking the integrity of generated reports. It does not perform unsafe runtime code generation or execution.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 20, 2026, 07:28 PM
Security Audit — agent-trust-hub — social-quality-auditor