fit-check
Pass
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [SAFE]: The skill is a documentation and process-oriented tool designed to enhance project security and risk awareness. It does not perform dangerous network operations, download external code, or request elevated privileges.
- [COMMAND_EXECUTION]: The instructions reference a local script at
records/scripts/piece-labels.shto be executed during the implementation phase. This is an internal project-specific utility for labeling pieces of work and does not involve remote code execution or untrusted inputs. - [SAFE]: The skill incorporates security best practices by instructing the agent to record the locations of credentials rather than their actual values, preventing accidental credential exposure in project records.
- [SAFE]: The risk acceptance protocol is robust, requiring explicit user confirmation for flagged tasks and providing a list of specific phrases that constitute valid acceptance while excluding ambiguous responses or silence.
Audit Metadata