bug-receipt

Pass

Audited by Gen Agent Trust Hub on Aug 18, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill implements structured documentation practices for bug reporting. It includes explicit instructions for 'evidence privacy-minimal' practices, specifically advising to redact credentials, tokens, and personal data from receipts.
  • [COMMAND_EXECUTION]: The skill includes a validation script (scripts/validate-receipt.mjs) intended to be run locally by the user or agent to verify JSON artifacts against a schema. This is standard developer tooling behavior and does not involve external network requests or suspicious command patterns.
  • [EXTERNAL_DOWNLOADS]: The skill references a GitHub repository and a schema URL hosted on github.io. These are used for documentation and schema validation purposes and are associated with the official repository of the tool.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 18, 2026, 06:28 AM
Security Audit — agent-trust-hub — bug-receipt