repo-publish-check
Pass
Audited by Gen Agent Trust Hub on Nov 13, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements a read-only audit workflow designed to prevent security leaks. It correctly identifies the need to scan both active files and full git history for secrets, personal data, and local user paths.
- [SAFE]: Instructions specifically prohibit committing sensitive review findings or audit reports to the target repository, recommending external or gitignored storage instead.
- [SAFE]: The skill mandates a 'history rewrite' approach (git filter-repo) for historical leaks, acknowledging that simple cleanup commits are insufficient for security.
- [SAFE]: Dependency usage is limited to standard developer tools (git, gh) and localized scripts (testing/skill_frontmatter_gate.py, testing/org_profile_gate.py) for structural validation and repository metadata management.
- [SAFE]: All instructions regarding repository visibility changes require explicit human owner approval before execution.
Audit Metadata