skills/edwinhu/workflows/dev-handoff/Gen Agent Trust Hub

dev-handoff

Pass

Audited by Gen Agent Trust Hub on Jun 22, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses a PreToolUse hook to run a local Python script ('dev-delegation-guard.py') via the 'uv' package manager. This script resides within the skill's own root directory and is used for internal policy enforcement.
  • [COMMAND_EXECUTION]: The instructions direct the agent to execute standard shell commands, including 'cat' for reading planning files and 'git' for inspecting session history and uncommitted changes.
  • [SAFE]: Data access is restricted to the local project's environment, specifically the '.planning/' directory. No access to sensitive global system paths (such as SSH keys or cloud credentials) was detected.
  • [SAFE]: No network activity, remote downloads, or obfuscated content were found in the skill's instructions or configuration.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 22, 2026, 06:29 AM
Security Audit — agent-trust-hub — dev-handoff