status
Pass
Audited by Gen Agent Trust Hub on Sep 12, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes local bash commands to retrieve metadata and line counts for specific agent configuration files.
- Evidence: The script uses
wc -lto analyzeMEMORY.md,CLAUDE.md, and global Claude rules. - Evidence: The script uses
lsandgrepto identify topic-specific markdown files and rule files in the.claude/rules/directory. - [COMMAND_EXECUTION]: The skill performs automated validation of file references found within memory logs to identify stale entries.
- Evidence: Step 3 extracts potential file paths from
MEMORY.mdand uses the shell test operator[ ! -f "$f" ]to verify their existence. - Evidence: The extraction process uses a strict regular expression whitelist (
[a-zA-Z0-9_/.-]+\.(ts|js|py|md|json|yaml|yml)) which prevents shell metacharacters from being passed to the existence check, mitigating command injection risks.
Audit Metadata