dev-loop-tech-debt-tracker
Pass
Audited by Gen Agent Trust Hub on Jul 8, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADS
Full Analysis
- [SAFE]: Static analysis of the skill's instructions and implementation patterns reveals no malicious activity, behavior overrides, or hidden persistence mechanisms. The skill is designed for engineering health monitoring.
- [EXTERNAL_DOWNLOADS]: The 'SonarQubeCollector' implementation pattern uses the Python 'requests' library to interact with external SonarQube API endpoints. This network activity is a functional requirement for retrieving code quality metrics.
- [DATA_EXFILTRATION]: No sensitive local data, environment variables, or credentials are accessed or transmitted. The skill's network operations are restricted to project metric retrieval from user-supplied URLs.
Audit Metadata