sync-ref-wip
Pass
Audited by Gen Agent Trust Hub on Jul 17, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill requires manual user confirmation ("Phase 3: Show Diff") before any file modifications are applied via the Edit tool, which prevents unintended file overwrites or malicious modifications triggered by processed file content.
- [SAFE]: Indirect prompt injection risks are mitigated by a human-in-the-loop review process.
- Ingestion points: Local document files identified as ref_file and wip_file in SKILL.md.
- Boundary markers: Phase 3 diff review and explicit user confirmation.
- Capability inventory: Read, Edit, and Bash tools across Phase 0-3.
- Sanitization: Manual verification of changes by the user before execution.
- [COMMAND_EXECUTION]: Use of the Bash tool is restricted to retrieving file metadata (modification timestamps) via the stat command for internal synchronization logic.
- [SAFE]: No network activity, external dependencies, or credential access were identified; the skill operates entirely on local project files.
Audit Metadata