Command Development
Pass
Audited by Gen Agent Trust Hub on Aug 6, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill includes helper shell scripts in
references/testing-strategies.mdfor validating YAML and command file structures. Static analysis flagged standard utilities like 'dd' and 'rm', but these are used for creating and cleaning up local temporary test data within a development tutorial context. - [SAFE]: The skill provides instruction on using the native bash execution feature (
!syntax) while recommending security best practices, such as using theallowed-toolsfield to limit command scope (e.g.,git:*). - [SAFE]: In
SKILL.mdandreferences/plugin-features-reference.md, the skill identifies potential input injection risks when using user-provided arguments and provides explicitly labeled 'Validation Patterns' using grep and regex to sanitize inputs. - [SAFE]: The documentation for dynamic context (using backtick-bang syntax) is purely instructional and used within code examples to explain platform capabilities.
Audit Metadata