relay
Pass
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill operates entirely within the current workspace and implements strict directory-boundary matching (
startsWith(cwd + path.sep)) to prevent session data from leaking between sibling repositories or unrelated projects. - [SAFE]: File operations are limited to project-specific paths such as
.agents/artifacts/and.agents/context/for state persistence and handoff packets. - [SAFE]: Command execution is restricted to standard Git forensics (e.g.,
git status,git log) used to reconstruct session state when a live handoff file is missing or stale. - [SAFE]: The skill includes an explicit 'verification-over-trust' lens in its audit mode, instructing the agent to verify state claims against live reality rather than trusting the text of the handoff file itself.
- [SAFE]: No network operations, obfuscation, or remote code execution patterns were detected.
Audit Metadata