skills/danangjoyoo/nerd/nerd-fast/Gen Agent Trust Hub

nerd-fast

Pass

Audited by Gen Agent Trust Hub on Aug 3, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The script scripts/symbol_index.py executes local CLI tools such as git and ctags to facilitate file enumeration and symbol extraction. These executions are performed using the subprocess module with list-based arguments, which prevents shell injection vulnerabilities. The script interacts only with the local repository and standard system binaries.
  • [EXTERNAL_DOWNLOADS]: Instructions within SKILL.md define a protocol for the agent to check for the presence of Universal Ctags. If the dependency is missing, the agent is instructed to request explicit user authorization before initiating an installation. This ensures that no external software is downloaded or installed without informed user consent.
  • [DATA_EXFILTRATION]: The skill builds a local index of symbols to optimize navigation. This process involves reading file metadata and symbol definitions, which are then stored in a persistent SQLite database located in the user's standard local cache directory (e.g., ~/.cache/nerd/). There are no network operations detected that would exfiltrate this repository data to a remote server.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 3, 2026, 05:35 PM
Security Audit — agent-trust-hub — nerd-fast