context-fix

Pass

Audited by Gen Agent Trust Hub on Aug 11, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill invokes the git command-line tool to inspect repository history, verify file existence, and manage review branches. Commands are executed by passing arguments as arrays to minimize shell injection risks.
  • [SAFE]: The tool utilizes an 'Exact Action Receipt' system, ensuring that file modifications are only performed when an exact preimage and verifiable provenance (static check or model-verified repository state) are provided.
  • [SAFE]: A robust safePath utility is used to validate all file paths, preventing directory traversal and restricting modifications to the authorized context set while protecting sensitive directories like .git.
  • [SAFE]: Fix application is transactional and non-destructive; it operates on separate review branches and includes automatic rollbacks and post-write verification of file integrity and token counts.
  • [SAFE]: The skill uses a structured 'honesty gradient' to clearly distinguish between definitional contradictions, empirical findings, and consensus recommendations, preventing the user from misinterpreting the certainty of any finding.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 11, 2026, 04:07 PM
Security Audit — agent-trust-hub — context-fix