ceratops-contract-review
Pass
Audited by Gen Agent Trust Hub on Jun 16, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses Python scripts to perform validation and auditing of configuration contracts. Evidence includes calls such as
python scripts/validation/github-validate-org-contract.py --helpand use of thegh(GitHub CLI) tool for evidence gathering. These are used for administrative purposes within the local repository context. - [EXTERNAL_DOWNLOADS]: The skill references checking official registries and documentation such as Docker Hub, GHCR (GitHub Container Registry), PyPI, and GitHub's official documentation. These are well-known, trusted technology services and their use is restricted to comparing current standards against internal contract files.
- [SAFE]: The skill includes strong safety boundaries, explicitly requiring user approval before applying any changes to the repository or contracts. It also instructs the agent to check for existing authentication and local state before requesting credentials.
Audit Metadata