fit-check

Pass

Audited by Gen Agent Trust Hub on Oct 29, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [SAFE]: The skill is a documentation and process-oriented tool designed to enhance project security and risk awareness. It does not perform dangerous network operations, download external code, or request elevated privileges.
  • [COMMAND_EXECUTION]: The instructions reference a local script at records/scripts/piece-labels.sh to be executed during the implementation phase. This is an internal project-specific utility for labeling pieces of work and does not involve remote code execution or untrusted inputs.
  • [SAFE]: The skill incorporates security best practices by instructing the agent to record the locations of credentials rather than their actual values, preventing accidental credential exposure in project records.
  • [SAFE]: The risk acceptance protocol is robust, requiring explicit user confirmation for flagged tasks and providing a list of specific phrases that constitute valid acceptance while excluding ambiguous responses or silence.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 29, 2026, 11:00 AM