create-epic

Pass

Audited by Gen Agent Trust Hub on Nov 10, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill automates documentation workflows by executing local shell and Node.js scripts. It utilizes 'git' and 'gh' CLI tools to resolve repository state and synchronize with issue trackers. These operations are essential for the skill's functionality and are performed using bundled, auditable scripts.
  • [SAFE]: The skill implements significant security hardening. The 'defer-mutation.js' utility automatically redacts sensitive patterns (such as GitHub personal access tokens and Atlassian API tokens) before they are recorded in journals. The configuration reader ('read-config.sh') protects its Python execution environment by clearing 'sys.path' to prevent local module hijacking, and uses 'SafeLoader' to mitigate deserialization risks.
Audit Metadata
Risk Level
SAFE
Analyzed
Nov 10, 2026, 03:29 PM