catchup
Pass
Audited by Gen Agent Trust Hub on Aug 17, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses standard git and shell commands (e.g.,
git log,git diff,grep,jq) to gather project status. These operations are restricted to the local repository and the project's own configuration files. - [DATA_EXPOSURE]: The skill reads project metadata from files like
package.jsonandCargo.toml. It does not attempt to access sensitive directories such as SSH keys or environment secrets. - [INDIRECT_PROMPT_INJECTION]: The skill scans for TODO and FIXME markers in recent files. While this involves processing untrusted file content, the risk is negligible as the content is only used for summary purposes within the agent's context.
Audit Metadata