ground-my-take
Pass
Audited by Gen Agent Trust Hub on Aug 13, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill invokes a local executable located at
.slipbox/bin/slipboxto manage note states, links, and backlog items. These commands are localized to the workspace and are essential for the skill's functionality. - Evidence:
SKILL.mdcontains several shell execution blocks for commands like.slipbox/bin/slipbox evergreen find,.slipbox/bin/slipbox links add, and.slipbox/bin/slipbox evergreen update. - [SAFE]: The skill follows secure practices for note management, such as verifying the presence of local configuration files and using absolute paths for its internal tools. It does not perform remote downloads, exfiltrate data, or attempt to bypass safety constraints.
- Evidence:
SKILL.mdincludes explicit checks for.slipbox/config.jsonand ensures theslipboxbinary is called from a specific project path rather than relying on the globalPATHenvironment variable.
Audit Metadata