sg-change-report
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill executes
node visual-tests/build-review.mjsto generate HTML reports and uses standardgitcommands to stage artifacts. These operations are restricted to the local project workspace and are consistent with the skill's primary purpose of visual reporting. - [DATA_EXPOSURE]: The skill manages screenshots and visual report data. All data handling is local to the
visual-tests/_results/directory. No network exfiltration or access to sensitive system files was detected. - [REMOTE_CODE_EXECUTION]: The skill references a local bootstrap process that copies a template script (
build-review.mjs) from the plugin's internal directory to the local project. This is a standard initialization pattern for this toolset and does not involve untrusted remote sources.
Audit Metadata