evaluate-repository
Pass
Audited by Gen Agent Trust Hub on Jul 20, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: Uses local shell commands including
git grep,git ls-files,npm audit, andpip-auditto inspect repository health and identify vulnerabilities. - [DATA_EXFILTRATION]: Identifies sensitive file patterns such as
.env,.pem, and hardcoded credentials; however, it lacks any network-bound commands (curl,wget,fetch) that would exfiltrate this discovered data. - [SAFE]: The skill's primary purpose is security auditing. The logic is transparently documented, focuses on identification of risks, and adheres to a read-only workflow as stated in its prerequisites.
Audit Metadata