unhobble
Pass
Audited by Gen Agent Trust Hub on Jul 28, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a static analysis tool that processes local markdown files. No malicious behaviors were identified during the audit.
- [COMMAND_EXECUTION]: The use of
subprocess.runis confined to the integration tests (tests/test_cli_integration.py) to verify the tool's command-line interface. The core auditing logic inscripts/context_audit.pydoes not execute shell commands. - [EXTERNAL_DOWNLOADS]: Dependencies on
pytestandtiktokenare listed intests/requirements-dev.txt. These are common, reputable libraries used for testing and token counting. - [DATA_EXFILTRATION]: The auditing script reads file content for analysis but does not contain any networking capabilities, ensuring that all data remains on the local system.
Audit Metadata