ihs-repo-harness
Pass
Audited by Gen Agent Trust Hub on May 5, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The Python script
scripts/generate_ihs_report.pyexecutes system commands to gather repository metrics. It usessubprocess.runwith list-based arguments to securely invokegit(for history and structure) andnpm(for type-checking and tests). This is the primary function of the skill and is implemented according to best practices to prevent shell injection. - [DATA_EXFILTRATION]: While the script reads repository files to analyze technical debt markers like 'TODO' or 'any' types, it performs no network operations and keeps all data within the local file system.
- [SAFE]: The skill's behavior is consistent with its stated purpose of repository health assessment and does not exhibit malicious patterns such as obfuscation or persistence.
Audit Metadata