write
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- Command Execution: The skill executes local shell scripts (
scripts/lint.sh) and standard Git commands to manage the documentation lifecycle. These operations are restricted to the local environment and are standard for version control tasks. - Automated Hook Execution: A post-edit hook (
scripts/post-edit.sh) automatically runs a formatter on Markdown files. The script usesnpx --no-install, which ensures the tool is executed from the local environment's existing dependencies rather than being downloaded from a remote registry at runtime. - Input Processing: The formatting script processes internal tool metadata to identify which files to format. It uses structured data parsing (
jq) and proper shell quoting to handle filenames, which helps ensure that file paths are processed correctly without unintended side effects.
Audit Metadata