flake
Pass
Audited by Gen Agent Trust Hub on Jul 5, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill provides a shell script (
scripts/find_latest_release_tag.sh) used for automating git tag retrieval. This script performs standard git operations to fetch and sort tags from a remote repository and does not exhibit any command injection vulnerabilities. - [EXTERNAL_DOWNLOADS]: The instructions in
SKILL.mddescribe how to install supplementary utility skills (such asdeslop,no-mistakes, andimprove) using a project-specific script (scripts/install-external-skills.py). These utilities are presented as part of the developer's ecosystem for enhancing code quality and agent workflows. - [SAFE]: The documentation follows industry security best practices, such as instructing users to use platform-native secrets for sensitive values like Slack webhooks and emphasizing the mocking of external services during testing.
- [SAFE]: No obfuscation, prompt injection, or unauthorized data access patterns were found across the skill's instructions, metadata, or supporting scripts.
Audit Metadata