implementing-msh
Pass
Audited by Gen Agent Trust Hub on Jul 8, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches documentation and migration guides from the author's official GitHub repositories to ensure code generation matches the user's installed package versions.
- Targets vendor-owned repositories under
github.com/beecode-rs/*andraw.githubusercontent.com/beecode-rs/*. - Resources retrieved are restricted to technical documentation (README.md, MIGRATION.md) and release notes.
- [COMMAND_EXECUTION]: Employs standard shell commands to inspect project configuration files for versioning data.
- Uses
grepto read version strings frompackage.jsonandpackage-lock.json. - This behavior is limited to project discovery and does not involve elevated privileges or unsafe argument injection.
- [SAFE]: The skill's operations are consistent with its primary purpose as a development assistant. It lacks obfuscated code, data exfiltration mechanisms, or attempts to bypass security controls. While it ingests external documentation, the sources are trusted vendor repositories, and the resulting data is used solely to inform technical advice.
Audit Metadata