woostack-status

Pass

Audited by Gen Agent Trust Hub on Aug 29, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill operates in a read-only capacity, explicitly stating it never performs writes to Git, GitHub, Linear, or Plane. All command definitions and conventions support this read-only posture.
  • [SAFE]: The included test scripts (scripts/tests/) use standard Bash and Python for structural validation and fixture testing. They read local JSON files and perform logic checks without any network activity or external dependency fetching.
  • [SAFE]: Data processing instructions include robust verification steps, such as matching branch SHAs to PR metadata and rejecting ambiguous or duplicate matches, which mitigates risks related to indirect data poisoning.
  • [SAFE]: No hardcoded credentials, obfuscation, or persistence mechanisms were detected in the skill's instructions or supporting scripts.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 29, 2026, 04:42 AM
Security Audit — agent-trust-hub — woostack-status