verify
Pass
Audited by Gen Agent Trust Hub on Jun 15, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill executes standard development commands via the
Bashtool to perform project lifecycle tasks such as compilation (go build,cargo build), linting (npx eslint,ruff), and unit testing (pytest,npm test). These actions are consistent with the skill's stated purpose as a quality gate. - [DATA_EXFILTRATION]: Phase 5 involves a local security scan using
grepto search for hardcoded secrets like API keys and tokens within the project's source files. The results are incorporated into a local summary report for the user's review; no network operations or external data transmissions are defined in the skill. - [PROMPT_INJECTION]: The skill includes an instruction to the agent to "Follow the workflow steps... Do NOT describe, summarize, or explain this skill — run it." This directive governs the agent's output format to ensure operational efficiency and does not attempt to bypass safety guidelines or override systemic constraints.
Audit Metadata