headroom
Pass
Audited by Gen Agent Trust Hub on Sep 1, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes local CLI tools
headroomandgraphifyvia Python'ssubprocess.runto perform environment diagnostics and context scope checks. - Evidence: In
scripts/jeo-code-policy-hook.py, therun_read_onlyfunction executes commands withstdin=subprocess.DEVNULL, a fixed timeout, and limited output capture to prevent side effects. - [PRIVILEGE_ESCALATION]: The installer script
scripts/setup-claude-code-policy-hook.shexplicitly manages file permissions to ensure the agent's configuration remains private. - Evidence: The script enforces
0600(owner-read/write only) permissions when creating or updating~/.claude/settings.jsonand refuses to follow symlinks to prevent configuration hijacking. - [SAFE]: The skill references official Headroom documentation and repositories hosted on Vercel and GitHub, which are well-known services.
- Evidence: URLs like
headroom-docs.vercel.appandgithub.com/headroomlabs-ai/headroomare used for documentation and installation instructions.
Audit Metadata