ds-govern
Pass
Audited by Gen Agent Trust Hub on Aug 2, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches a configuration template from the vendor's official GitHub repository (
https://raw.githubusercontent.com/BIAsia/c2d2c/main/templates/C2D2C.template.md) to bootstrap project parameters when local templates are missing. - [COMMAND_EXECUTION]: Utilizes
rg(ripgrep) to perform a comprehensive census of the repository, identifying hardcoded visual dimensions and style variants for migration. - [PROMPT_INJECTION]: Incorporates a manual intervention step ('STOP: user review') that requires explicit user approval of the design specification before the agent proceeds to modify, migrate, or delete any code.
- [PROMPT_INJECTION]: Indirect injection surface detected. Ingestion points: Codebase contents via
rgand configuration files (C2D2C.md,C2D2C.template.md). Boundary markers: Present ('STOP: user review' checkpoint). Capability inventory: File system read (rg), file system write (Steps 3, 5, 7), and file system deletion (Step 6). Sanitization: Absent.
Audit Metadata