my-skills-stray-recovery
Pass
Audited by Gen Agent Trust Hub on Oct 14, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute local Node.js scripts, specifically
scripts/consolidate-strays.mjsandscripts/verify-patch-records.mjs, to analyze and synchronize repository files. It also utilizes Git commands (e.g.,git -C "$REPO" status) to verify the state of the workspace. - [DYNAMIC_EXECUTION]: The skill relies on running JavaScript files located within the repository's
scripts/directory. This is standard behavior for technical automation and maintenance tools and does not involve downloading remote code. - [SAFE]: The skill includes security-conscious configurations, such as
disable-model-invocation: true, which restricts the agent's ability to trigger tools automatically without user oversight. The instructions emphasize a 'propose-before-write' and 'verify-then-report' workflow, ensuring user control over all repository modifications.
Audit Metadata