night-market-architecture-contract
Pass
Audited by Gen Agent Trust Hub on Jul 31, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to use shell commands such as
git,ripgrep(rg),ls, andfindfor repository inspection and state verification. These operations are restricted to project documentation and metadata files. - [DYNAMIC_EXECUTION]: The skill references a local Python script (
update_versions.py) used viauv runto synchronize version numbers across multiple manifest files. It also includes apython3 -cone-liner to parse project JSON metadata. - [DATA_EXPOSURE]: The skill accesses project-specific configuration files (e.g.,
marketplace.json,plugin.json,metadata.json) and architectural records (ADRs) to verify compliance with project standards. It does not target sensitive system or user data. - [EXTERNAL_DOWNLOADS]: Mentions using
gh api graphqlto interact with GitHub Discussions as a project-specific 'collective memory' service. This is a documented architectural decision (ADR-0007) and uses a well-known service (GitHub) via official CLI tools.
Audit Metadata