fusion-code-conventions
Pass
Audited by Gen Agent Trust Hub on May 9, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill conducts local project discovery by reading configuration files such as
tsconfig.json,biome.json, and.editorconfig. This is necessary to align its code review logic with the specific settings of the repository it is analyzing. - [SAFE]: The
agents/constitution.agent.mdutilizes the commandgit log -n 20 --onelineto verify if the project's commit history adheres to guidelines like conventional commits. This operation is limited to reading local repository metadata and is consistent with the skill's purpose. - [SAFE]: The skill provides instructions for applying corrections to files, but explicitly requires user confirmation before any mutation occurs, ensuring human oversight and preventing unauthorized file changes.
- [SAFE]: All external URLs found in the changelog and documentation point to the author's own GitHub repositories or well-known development services (e.g., Vite, MediatR). No suspicious or obfuscated remote sources were detected.
Audit Metadata