command-development

Pass

Audited by Gen Agent Trust Hub on Oct 3, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill is purely educational and serves as documentation for creating slash commands. It contains instructions and examples intended to teach development patterns.
  • [DYNAMIC_CONTEXT_INJECTION]: The skill documents and provides examples for the !command`` syntax, which is a platform feature of slash commands used to gather dynamic context at load time. The examples follow best practices, such as using well-known CLI tools (e.g., git, npm, gh) and recommending restrictive tool filters like Bash(git:*) to limit the execution scope.
  • [DATA_EXPOSURE]: The skill describes patterns for maintaining workflow state using local files (e.g., .claude/deployment-state.local.md). This is presented as a standard best practice for state management across command invocations and does not involve unauthorized access to or exfiltration of sensitive information.
  • [COMMAND_EXECUTION]: While the skill contains many examples of shell commands within documentation blocks, these are provided as templates for developers. The skill itself does not execute these commands in a malicious or hidden way.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 3, 2026, 10:26 AM