dx-archive
Pass
Audited by Gen Agent Trust Hub on Oct 11, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill performs standard local file system operations using
git mvormvto relocate project directories. These are routine maintenance tasks and do not involve unauthorized privilege escalation or dangerous execution patterns. - [INDIRECT_PROMPT_INJECTION]: The skill reads from user-provided or project-generated files such as
roadmap.mdandreviews/*.md. While these constitute a potential data ingestion surface, the skill uses this information for specific data parsing (checking for linked child changes and resolution statuses). It lacks high-risk capabilities like network access or arbitrary command execution that would make this surface a significant vulnerability. (Internal assessment: SAFE). - [COMMAND_EXECUTION]: The skill utilizes standard version control and file system utilities (
git,mv) to manage file locations. These commands are restricted to the local context and are consistent with the skill's stated purpose of archiving project assets.
Audit Metadata