hub
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [SAFE]: The skill performs local file management of its own registry file (~/.claude/hubs/registry.json) and accesses the current working directory path (pwd). No sensitive system credentials or private keys are accessed.
- [COMMAND_EXECUTION]: Uses jq via Bash to read and update JSON data. The implementation uses --arg flags to safely pass variables, preventing injection into the jq processing logic.
Audit Metadata