catchup

Pass

Audited by Gen Agent Trust Hub on Aug 17, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses standard git and shell commands (e.g., git log, git diff, grep, jq) to gather project status. These operations are restricted to the local repository and the project's own configuration files.
  • [DATA_EXPOSURE]: The skill reads project metadata from files like package.json and Cargo.toml. It does not attempt to access sensitive directories such as SSH keys or environment secrets.
  • [INDIRECT_PROMPT_INJECTION]: The skill scans for TODO and FIXME markers in recent files. While this involves processing untrusted file content, the risk is negligible as the content is only used for summary purposes within the agent's context.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 17, 2026, 07:35 AM
Security Audit — agent-trust-hub — catchup