plan-devex-review
Pass
Audited by Gen Agent Trust Hub on Jul 28, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill instructions define an interactive workflow for reviewing developer products. It utilizes allowed tools (
Read,Edit,Bash,WebSearch,AskUserQuestion) for their intended purposes: gathering project context, modifying plan files based on user feedback, and researching competitive benchmarks. - [SAFE]: No hardcoded credentials, sensitive file access (beyond project-specific files like README or package.json), or suspicious network operations were detected. All URL references in the documentation point to well-known technology companies (Stripe, Vercel, Clerk, etc.) or academic research (Microsoft, ACM).
- [SAFE]: The skill uses the standard
!commandsyntax (referenced asgh pr viewetc. in the instructions) correctly for project context detection within a developer environment. There is no evidence of command injection or malicious use of this feature. - [SAFE]: The dependency on
dx-hall-of-fame.mdis a local file reference containing static documentation and best practices, posing no remote code execution risk.
Audit Metadata