audit
Pass
Audited by Gen Agent Trust Hub on May 10, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes local shell commands such as
find,grep, andgitto perform codebase analysis. These operations are essential for the audit and are executed within the local environment. - [EXTERNAL_DOWNLOADS]: The workflow involves running
npm audit,pip-audit, andnpx -y knip. These tools are well-known in the development community for security and code quality analysis and are used according to their intended purpose. - [DATA_EXFILTRATION]: While the skill accesses sensitive project files like
.envand configuration files for auditing, it does not contain any instructions for exfiltrating this data to external or untrusted domains. - [SAFE]: The skill implements a structured, multi-phase process that includes user confirmation steps and uses established security practices for its execution environment.
Audit Metadata