marketplace-gate
Pass
Audited by Gen Agent Trust Hub on Aug 28, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements a repository auditing workflow using standard local utilities (Bash, Grep, Glob) to verify project metadata, documentation status, and maintenance signals.\n- [SAFE]: The skill includes a proactive security screening step (Check 5) that scans for hardcoded secrets (e.g., API_KEY, SECRET) using the
grep -lflag, which identifies problematic files while keeping the sensitive content out of the execution logs.\n- [SAFE]: Shell commands correctly utilize double-quoting for theREPO_PATHvariable, mitigating potential command injection vulnerabilities arising from user-supplied target directory paths.\n- [SAFE]: The skill handles environment variables (like$FH_DIR) and file operations gracefully, using standard redirections and checks to manage non-existent paths or non-git repositories without compromising the execution environment.
Audit Metadata