implementing-msh

Pass

Audited by Gen Agent Trust Hub on Jul 8, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill fetches documentation and migration guides from the author's official GitHub repositories to ensure code generation matches the user's installed package versions.
  • Targets vendor-owned repositories under github.com/beecode-rs/* and raw.githubusercontent.com/beecode-rs/*.
  • Resources retrieved are restricted to technical documentation (README.md, MIGRATION.md) and release notes.
  • [COMMAND_EXECUTION]: Employs standard shell commands to inspect project configuration files for versioning data.
  • Uses grep to read version strings from package.json and package-lock.json.
  • This behavior is limited to project discovery and does not involve elevated privileges or unsafe argument injection.
  • [SAFE]: The skill's operations are consistent with its primary purpose as a development assistant. It lacks obfuscated code, data exfiltration mechanisms, or attempts to bypass security controls. While it ingests external documentation, the sources are trusted vendor repositories, and the resulting data is used solely to inform technical advice.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 8, 2026, 08:25 AM