skills/howells/arc/audit/Gen Agent Trust Hub

audit

Pass

Audited by Gen Agent Trust Hub on May 10, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes local shell commands such as find, grep, and git to perform codebase analysis. These operations are essential for the audit and are executed within the local environment.
  • [EXTERNAL_DOWNLOADS]: The workflow involves running npm audit, pip-audit, and npx -y knip. These tools are well-known in the development community for security and code quality analysis and are used according to their intended purpose.
  • [DATA_EXFILTRATION]: While the skill accesses sensitive project files like .env and configuration files for auditing, it does not contain any instructions for exfiltrating this data to external or untrusted domains.
  • [SAFE]: The skill implements a structured, multi-phase process that includes user confirmation steps and uses established security practices for its execution environment.
Audit Metadata
Risk Level
SAFE
Analyzed
May 10, 2026, 04:39 PM