manage-metrics

Pass

Audited by Gen Agent Trust Hub on Jul 11, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The script utilizes subprocess.run to call internal platform-runtime components for session transcript processing. This is implemented securely using a list of arguments rather than a shell string, ensuring that inputs such as the session ID are not executed as commands.
  • [SAFE]: The skill incorporates robust file system protections to prevent path traversal. Specifically, the print-phase-breakdown operation validates that user-supplied output paths are relative and remain within the authorized plan directory using resolved path checks.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 11, 2026, 07:12 AM
Security Audit — agent-trust-hub — manage-metrics