monitor-pdfs
Pass
Audited by Gen Agent Trust Hub on Aug 26, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The
watchdog.pyscript usessubprocess.runto execute thefindcommand for counting files in specified storage directories. - Evidence:
subprocess.run(["find", str(path), "-name", "*.pdf"], ...)andsubprocess.run(["find", str(path), "-name", "*.jpg"], ...)inwatchdog.py. - These calls use fixed command names (
find) and local path variables derived from environment settings, posing no significant injection risk in the current context. - [COMMAND_EXECUTION]: The
run.shscript initializes a virtual environment usinguvand executes the Python monitoring script. - Evidence:
uv venv .venvanduv pip install ...inrun.sh. - This follows standard practice for skill-local environment management.
Audit Metadata