balance-check

Pass

Audited by Gen Agent Trust Hub on Nov 10, 2026

Risk Level: SAFEDYNAMIC_CONTEXT_INJECTIONCOMMAND_EXECUTION
Full Analysis
  • [DYNAMIC_CONTEXT_INJECTION]: The skill uses a dynamic context injection pattern in SKILL.md (!bash ...) to execute a local script during the skill loading process. This command is used to resolve configuration keys related to automation modes from a local helper script (yaml-helper.sh). The execution is static and does not incorporate untrusted input.
  • [COMMAND_EXECUTION]: The skill's allowed-tools configuration limits the use of the Bash tool to a specific local script: yaml-helper.sh. This restriction follows the principle of least privilege, preventing the agent from executing arbitrary or unauthorized shell commands while still allowing it to use necessary project-specific tooling for configuration management.
Audit Metadata
Risk Level
SAFE
Analyzed
Nov 10, 2026, 04:15 AM