develop-small-feature
Pass
Audited by Gen Agent Trust Hub on Jul 29, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill orchestrates a standard software development lifecycle (branching, TDD, linting, user verification, and PR creation) using specialized sub-skills. The process includes a mandatory manual verification step by the user prior to committing any changes, which serves as a critical security control against unintended or malicious code generation.
- [COMMAND_EXECUTION]: The skill uses the
Bashtool to perform routine development tasks such as identifying the current git branch and running repository-specific static checks (e.g.,npm run check). These commands are standard for the skill's intended use case and do not involve suspicious patterns like piped remote execution. - [DATA_EXFILTRATION]: While the skill manages code commits and pull requests, all network and file system operations are consistent with the primary purpose of version control management within a development environment. There is no evidence of sensitive data exposure or exfiltration to unauthorized external domains.
Audit Metadata