skills/ingpoc/skills/skill-profile/Gen Agent Trust Hub

skill-profile

Pass

Audited by Gen Agent Trust Hub on Jun 15, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill provides instructions to execute Git commands and a local Python script to manage a repository located at ~/.codex/skills. These operations are consistent with the skill's stated purpose of maintaining a Git-backed profile library.
  • [COMMAND_EXECUTION]: The scripts/profile_status.py script uses the subprocess module to invoke the git binary. The implementation passes arguments as a list and does not use shell=True, which follows security best practices for mitigating command injection risks.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 15, 2026, 09:45 AM
Security Audit — agent-trust-hub — skill-profile