refactor-data-guard
Pass
Audited by Gen Agent Trust Hub on Jul 6, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill facilitates automated assertions on database state during refactoring by comparing snapshots of table row counts and schema definitions. All database interactions are read-only and use standard local tools such as pg_dump, mysqldump, and sqlite3.
- [SAFE]: The script scripts/checklist.mjs uses execFileSync to execute git diff --name-only, which is a controlled and safe method for identifying modified files within the repository.
- [SAFE]: The skill's instructions in references/method.md explicitly warn against the use of destructive database operations like truncate, migrate, or db:reset, ensuring that the tool remains non-intrusive and safe for development environments.
- [SAFE]: No evidence of data exfiltration, obfuscation, or unauthorized access to sensitive credentials was detected. The skill operates locally and does not perform any network operations.
Audit Metadata