ia-verification-before-completion

Pass

Audited by Gen Agent Trust Hub on Jul 16, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill instructs the agent to run various shell commands for verification, including git, rg, pytest, npm, curl, terraform, docker, and kubectl. These tools are used for their intended engineering purposes, such as identifying affected files, running test suites, and performing health checks on local endpoints.
  • [SAFE]: The skill enforces defensive engineering practices, such as running verification in isolated git worktrees to prevent workspace contamination and utilizing 'Adversarial Probes' (e.g., boundary value analysis, idempotency checks) to ensure code robustness.
  • [DATA_EXFILTRATION]: The skill uses curl for testing backend endpoints (e.g., localhost:3000/health). There is no indication of sensitive data being sent to external or unauthorized domains.
  • [COMMAND_EXECUTION]: The isolated-verification.md reference provides a safe scripted workflow for staging changes in a temporary worktree to verify them against a clean base commit.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 16, 2026, 06:03 PM
Security Audit — agent-trust-hub — ia-verification-before-completion