confkey
Pass
Audited by Gen Agent Trust Hub on Jun 17, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: Executes shell commands via the Bash tool to perform repository searches using
findandgrep, run the GitHub CLI (gh) for issue management, and execute build tasks withcargo build. - [SAFE]: Implements mandatory user confirmation gates using
AskUserQuestionbefore resolving repository paths, proceeding with analysis results, and filing GitHub issues. - [SAFE]: Utilizes secure shell scripting patterns, such as quoted here-docs (
cat <<'EOF'), to prevent the accidental execution of content within GitHub issue bodies. - [SAFE]: All external interactions are restricted to well-known vendor-owned repositories (
DataDog/saluki,datadog-agent) and standard development tools.
Audit Metadata