snippets
Pass
Audited by Gen Agent Trust Hub on Aug 21, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses standard shell commands (
git,jq,python3,grep,ls,awk) to manage files and state. These operations are scoped to the user's home directory (~/.codevoyant/snippets) and are consistent with the skill's stated purpose. - [EXTERNAL_DOWNLOADS]: The
syncworkflow usesgit pullto synchronize with a user-provided repository. This is an intentional feature for backup and multi-machine synchronization. The repository URL is requested from the user or read from their local configuration file. - [DATA_EXFILTRATION]: The skill interacts with a git remote in the
syncworkflow. This is standard behavior for a synchronization tool. No credentials or sensitive files outside of the defined snippet store are accessed or transmitted. - [REMOTE_CODE_EXECUTION]: While the skill invokes a local Python script (
scripts/md2snippets.py), it does not execute remote code or download untrusted scripts for execution. The Python script is part of the skill package and performs static text conversion.
Audit Metadata