manage-references

Pass

Audited by Gen Agent Trust Hub on Jul 11, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses the subprocess module to execute git commands (such as diff and status) for tracking changes within the repository. The commands are executed as an argument list without a shell environment, which mitigates common command injection risks.
  • [DATA_EXFILTRATION]: No network operations or credential harvesting patterns were found. The skill's operations are confined to the local project structure.
  • [SAFE]: The implementation focuses on managing structured JSON data and Git state for project organization. No malicious patterns, obfuscation, or safety bypasses were identified.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 11, 2026, 07:12 AM
Security Audit — agent-trust-hub — manage-references