context-update
Pass
Audited by Gen Agent Trust Hub on Sep 5, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill executes
gitcommands and calls neighboring scriptscontext-audit/run.mjsandcontext-fix/run.mjs. These executions are limited to repo context maintenance and use standard Node.jsexecFileSyncandspawnSyncAPIs. - [DATA_EXPOSURE_AND_EXFILTRATION]: The skill reads and writes JSON artifacts (plans and findings) strictly within the
.git/context-specdirectory of the target repository. It does not perform network operations or access sensitive credentials outside of standard Git repository metadata. - [REMOTE_CODE_EXECUTION]: The skill calls external scripts (
context-auditandcontext-fix), but these are defined as mandatory separately-installed sibling skills within the local environment. There is no evidence of downloading or executing code from remote sources. - [DYNAMIC_EXECUTION]: The script uses
spawnSyncto invoke other local Node.js scripts usingprocess.execPath. Path resolution is handled via standard Node.js path utilities, and inputs are validated against the repository root.
Audit Metadata