context-fix
Pass
Audited by Gen Agent Trust Hub on Aug 11, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill invokes the
gitcommand-line tool to inspect repository history, verify file existence, and manage review branches. Commands are executed by passing arguments as arrays to minimize shell injection risks. - [SAFE]: The tool utilizes an 'Exact Action Receipt' system, ensuring that file modifications are only performed when an exact preimage and verifiable provenance (static check or model-verified repository state) are provided.
- [SAFE]: A robust
safePathutility is used to validate all file paths, preventing directory traversal and restricting modifications to the authorized context set while protecting sensitive directories like.git. - [SAFE]: Fix application is transactional and non-destructive; it operates on separate review branches and includes automatic rollbacks and post-write verification of file integrity and token counts.
- [SAFE]: The skill uses a structured 'honesty gradient' to clearly distinguish between definitional contradictions, empirical findings, and consensus recommendations, preventing the user from misinterpreting the certainty of any finding.
Audit Metadata