qa-review

Pass

Audited by Gen Agent Trust Hub on Jul 10, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes verification commands derived from standard project configuration files, including package.json (lint, test, build), pyproject.toml (pytest, ruff, mypy), and .helloagents/verify.yaml.
  • [COMMAND_EXECUTION]: The skill invokes a local script located at scripts/qa-review-state.mjs to write structured state data to artifacts/qa-review.json.
  • [SAFE]: The skill's operations, including reading project metadata and executing validation tools, are consistent with its stated purpose of providing a quality assurance and delivery loop.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 10, 2026, 03:35 AM
Security Audit — agent-trust-hub — qa-review