skill-auditor
Pass
Audited by Gen Agent Trust Hub on May 12, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes local bash scripts (
scripts/audit.sh,scripts/validate.sh) and standard Unix utilities such asawk,grep,find, andwc. This is the intended mechanism for its functionality as a linter and auditor. - [DATA_EXPOSURE_AND_EXFILTRATION]: No network activity or exfiltration patterns were detected. The skill operates exclusively on the local filesystem and does not access sensitive credentials or environment variables.
- [REMOTE_CODE_EXECUTION]: The skill does not download or execute remote code. It delegates certain structural checks to a local
heal.shscript, which is an internal dependency. - [SAFE]: The skill is a utility for improving skill quality and adheres to safe coding practices for local tooling, including read-only access to target files and clear execution boundaries.
Audit Metadata