workflow-rules

Pass

Audited by Gen Agent Trust Hub on Aug 15, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill manages local configuration file CLAUDE.md through a structured interactive process. It requires user confirmation via AskUserQuestion before performing any file modifications or creating new directories.
  • [SAFE]: Cross-platform path resolution for the user's home directory uses standard system environment variables ($HOME, %USERPROFILE%) or the official Node.js os.homedir() method.
  • [SAFE]: All file operations (Read, Write, Edit) are performed on local paths explicitly chosen by the user (~/.claude/CLAUDE.md or ./CLAUDE.md). No external network requests or remote code downloads are present.
  • [SAFE]: The skill uses specific HTML comment markers to ensure that rule installation is idempotent and removal is precise, preventing accidental data loss or corruption of existing file content.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 15, 2026, 11:28 PM
Security Audit — agent-trust-hub — workflow-rules