manage-references
Pass
Audited by Gen Agent Trust Hub on Jul 11, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the
subprocessmodule to executegitcommands (such asdiffandstatus) for tracking changes within the repository. The commands are executed as an argument list without a shell environment, which mitigates common command injection risks. - [DATA_EXFILTRATION]: No network operations or credential harvesting patterns were found. The skill's operations are confined to the local project structure.
- [SAFE]: The implementation focuses on managing structured JSON data and Git state for project organization. No malicious patterns, obfuscation, or safety bypasses were identified.
Audit Metadata