manage-logging

Pass

Audited by Gen Agent Trust Hub on Jul 11, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses Python's subprocess or argparse patterns to expose a CLI for logging. However, the commands are restricted to file operations (reading/writing log files) and do not allow for arbitrary shell command injection or execution.
  • [DATA_EXFILTRATION]: No network-related code (curl, requests, etc.) is present. The skill only interacts with local files under the .plan directory. Sensitive paths such as .ssh or .aws are not accessed.
  • [REMOTE_CODE_EXECUTION]: There are no patterns involving the download or execution of remote scripts. All logic is contained within the local Python files provided.
  • [CREDENTIALS_UNSAFE]: No hardcoded API keys, tokens, or secrets were found. The skill does not encourage or implement unsafe credential storage.
  • [PROMPT_INJECTION]: The skill instructions do not contain attempts to override agent behavior, bypass safety filters, or extract system prompts. The 'enforcement' sections are standard architectural constraints.
  • [EXTERNAL_DOWNLOADS]: The skill does not perform any external downloads. All dependencies (constants, file_ops, etc.) appear to be local modules within the same bundle environment.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 11, 2026, 07:12 AM
Security Audit — agent-trust-hub — manage-logging