marketplace-gate

Pass

Audited by Gen Agent Trust Hub on Aug 28, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill implements a repository auditing workflow using standard local utilities (Bash, Grep, Glob) to verify project metadata, documentation status, and maintenance signals.\n- [SAFE]: The skill includes a proactive security screening step (Check 5) that scans for hardcoded secrets (e.g., API_KEY, SECRET) using the grep -l flag, which identifies problematic files while keeping the sensitive content out of the execution logs.\n- [SAFE]: Shell commands correctly utilize double-quoting for the REPO_PATH variable, mitigating potential command injection vulnerabilities arising from user-supplied target directory paths.\n- [SAFE]: The skill handles environment variables (like $FH_DIR) and file operations gracefully, using standard redirections and checks to manage non-existent paths or non-git repositories without compromising the execution environment.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 28, 2026, 12:48 AM