codebase-onboarding
Pass
Audited by Gen Agent Trust Hub on Aug 6, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill uses standard, well-known CLI tools like
sccandripgrepfor structural codebase analysis (LOC, complexity, and pattern matching). - [SAFE]: The
git logcommands used for hotspot analysis are standard read-only operations that do not modify repository history or exfiltrate data. - [SAFE]: The skill encourages creating a local documentation file (
CODEBASE-MAP.md) within the repository rather than sending data to external services. - [SAFE]: The provided
verify.shscript is a benign structural validator that only performs read-only checks on the generated documentation usinggrep.
Audit Metadata