drift-analysis
Pass
Audited by Gen Agent Trust Hub on Jul 30, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill does not contain any detected malicious patterns, obfuscation, or unauthorized data exfiltration attempts. All operations are aligned with the stated purpose of analyzing project state and documentation drift.
- [COMMAND_EXECUTION]: The skill includes a pre-check routine that may execute a local binary named
agent-analyzer. This execution is used to generate repository intelligence and is gated by a user-interactive confirmation step (AskUserQuestion), ensuring the user retains control over the execution of local tools. - [DATA_EXPOSURE]: The skill reads repository documentation (README.md, PLAN.md, etc.) and analyzes GitHub state (issues, PRs, milestones). This metadata collection is necessary for identifying discrepancies between project plans and implementation and does not involve accessing sensitive user credentials or private keys.
- [REMOTE_CODE_EXECUTION]: The skill uses a semantic analysis phase via an LLM (Sonnet) to synthesize the collected data into a reconstruction plan. This analysis occurs within the agent's controlled environment using the data extracted by local JavaScript collectors.
Audit Metadata