script-shared

Pass

Audited by Gen Agent Trust Hub on Jul 11, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses subprocess.run to execute standard Git plumbing commands (such as git ls-files, git rev-parse, and git diff) to resolve project directories and compute worktree hashes. These operations are read-only and scoped to the project environment.
  • [COMMAND_EXECUTION]: In scripts/resolve_project_dir.py, the code executes internal platform scripts (specifically the manage-status skill) using the system's Python interpreter and script executor. This is a core part of the system's internal orchestration for handling Git worktrees.
  • [SAFE]: The skill contains logic for parsing configuration, scoring recipes based on keyword overlap, and providing human-friendly number parsing. No network access, data exfiltration, or prompt injection patterns were detected.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 11, 2026, 07:12 AM
Security Audit — agent-trust-hub — script-shared