skill-profile
Pass
Audited by Gen Agent Trust Hub on Jun 15, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill provides instructions to execute Git commands and a local Python script to manage a repository located at
~/.codex/skills. These operations are consistent with the skill's stated purpose of maintaining a Git-backed profile library. - [COMMAND_EXECUTION]: The
scripts/profile_status.pyscript uses thesubprocessmodule to invoke thegitbinary. The implementation passes arguments as a list and does not useshell=True, which follows security best practices for mitigating command injection risks.
Audit Metadata