ihs-repo-harness

Pass

Audited by Gen Agent Trust Hub on May 5, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The Python script scripts/generate_ihs_report.py executes system commands to gather repository metrics. It uses subprocess.run with list-based arguments to securely invoke git (for history and structure) and npm (for type-checking and tests). This is the primary function of the skill and is implemented according to best practices to prevent shell injection.
  • [DATA_EXFILTRATION]: While the script reads repository files to analyze technical debt markers like 'TODO' or 'any' types, it performs no network operations and keeps all data within the local file system.
  • [SAFE]: The skill's behavior is consistent with its stated purpose of repository health assessment and does not exhibit malicious patterns such as obfuscation or persistence.
Audit Metadata
Risk Level
SAFE
Analyzed
May 5, 2026, 06:25 AM