simplify-skill
Pass
Audited by Gen Agent Trust Hub on May 13, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes a local bash script
build-feature-description.shto resolve skill paths and generate a refactoring plan. - Evidence:
SKILL.mdinvokes the script using${CLAUDE_PLUGIN_ROOT}/skills/simplify-skill/scripts/build-feature-description.sh --name "<skill-name>". - Context: The script performs safe input validation, rejecting non-kebab characters and colons, and limits its file discovery to specific project subdirectories (excluding scripts/ and tests/).
- [REMOTE_CODE_EXECUTION]: While the skill invokes a separate skill (
imorlarch:im), this is a standard delegation pattern within the agent platform for modular task handling. - [DATA_EXFILTRATION]: No unauthorized network operations or sensitive file access patterns were found. The skill processes project markdown files for refactoring purposes.
Audit Metadata