dcg
Pass
Audited by Gen Agent Trust Hub on Jul 30, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill relies on the presence of a local binary named
dcg. It includes a validation script (scripts/validate-dcg.sh) that executes subcommands such asdcg doctoranddcg testto verify the tool's installation and rule efficacy. - [EXTERNAL_DOWNLOADS]: The skill's documentation and help systems reference an update mechanism (
dcg update) that downloads components from the official repository athttps://github.com/anthropics/destructive-command-guard. This is a standard update procedure for the tool and targets a trusted organization. - [SAFE]: Static analysis flags regarding destructive system commands (e.g.,
rm -rf /) are identified as false positives in this context. These patterns appear in documentation and test scripts as examples of what the guard tool is designed to block or as validation cases to ensure the security enforcement is functioning correctly.
Audit Metadata