next
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill manages project tasks by performing read-only operations on task metadata files like
task.jsonandtask.md. It utilizes structured processing withjqto handle this data securely without exposing the system to injection or data exfiltration risks. - [COMMAND_EXECUTION]: Execution of bash commands is restricted through the
allowed-toolsconfiguration to a specific set of internal scripts (next-actions.shandtask-actions.sh). This restricted scope prevents the execution of arbitrary or unauthorized commands. - [PRIVILEGE_ESCALATION]: The skill uses the
EnterWorktreetool to switch between development environments. This tool includes built-in safety mechanisms that require explicit user approval when accessing paths outside of the standard worktree directory.
Audit Metadata