sync-ref-wip

Pass

Audited by Gen Agent Trust Hub on Jul 17, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill requires manual user confirmation ("Phase 3: Show Diff") before any file modifications are applied via the Edit tool, which prevents unintended file overwrites or malicious modifications triggered by processed file content.
  • [SAFE]: Indirect prompt injection risks are mitigated by a human-in-the-loop review process.
  • Ingestion points: Local document files identified as ref_file and wip_file in SKILL.md.
  • Boundary markers: Phase 3 diff review and explicit user confirmation.
  • Capability inventory: Read, Edit, and Bash tools across Phase 0-3.
  • Sanitization: Manual verification of changes by the user before execution.
  • [COMMAND_EXECUTION]: Use of the Bash tool is restricted to retrieving file metadata (modification timestamps) via the stat command for internal synchronization logic.
  • [SAFE]: No network activity, external dependencies, or credential access were identified; the skill operates entirely on local project files.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 17, 2026, 12:05 PM
Security Audit — agent-trust-hub — sync-ref-wip