manage-logging
Pass
Audited by Gen Agent Trust Hub on Jul 11, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses Python's
subprocessorargparsepatterns to expose a CLI for logging. However, the commands are restricted to file operations (reading/writing log files) and do not allow for arbitrary shell command injection or execution. - [DATA_EXFILTRATION]: No network-related code (curl, requests, etc.) is present. The skill only interacts with local files under the
.plandirectory. Sensitive paths such as.sshor.awsare not accessed. - [REMOTE_CODE_EXECUTION]: There are no patterns involving the download or execution of remote scripts. All logic is contained within the local Python files provided.
- [CREDENTIALS_UNSAFE]: No hardcoded API keys, tokens, or secrets were found. The skill does not encourage or implement unsafe credential storage.
- [PROMPT_INJECTION]: The skill instructions do not contain attempts to override agent behavior, bypass safety filters, or extract system prompts. The 'enforcement' sections are standard architectural constraints.
- [EXTERNAL_DOWNLOADS]: The skill does not perform any external downloads. All dependencies (constants, file_ops, etc.) appear to be local modules within the same bundle environment.
Audit Metadata