ground-my-take

Pass

Audited by Gen Agent Trust Hub on Aug 13, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill invokes a local executable located at .slipbox/bin/slipbox to manage note states, links, and backlog items. These commands are localized to the workspace and are essential for the skill's functionality.
  • Evidence: SKILL.md contains several shell execution blocks for commands like .slipbox/bin/slipbox evergreen find, .slipbox/bin/slipbox links add, and .slipbox/bin/slipbox evergreen update.
  • [SAFE]: The skill follows secure practices for note management, such as verifying the presence of local configuration files and using absolute paths for its internal tools. It does not perform remote downloads, exfiltrate data, or attempt to bypass safety constraints.
  • Evidence: SKILL.md includes explicit checks for .slipbox/config.json and ensures the slipbox binary is called from a specific project path rather than relying on the global PATH environment variable.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 13, 2026, 08:15 AM