balance-check
Pass
Audited by Gen Agent Trust Hub on Nov 10, 2026
Risk Level: SAFEDYNAMIC_CONTEXT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [DYNAMIC_CONTEXT_INJECTION]: The skill uses a dynamic context injection pattern in
SKILL.md(!bash ...) to execute a local script during the skill loading process. This command is used to resolve configuration keys related to automation modes from a local helper script (yaml-helper.sh). The execution is static and does not incorporate untrusted input. - [COMMAND_EXECUTION]: The skill's
allowed-toolsconfiguration limits the use of theBashtool to a specific local script:yaml-helper.sh. This restriction follows the principle of least privilege, preventing the agent from executing arbitrary or unauthorized shell commands while still allowing it to use necessary project-specific tooling for configuration management.
Audit Metadata