next-lesson
Pass
Audited by Gen Agent Trust Hub on Sep 6, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_CONTEXT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses various shell commands (
ls,cat,stat,git status,git diff) to inspect the project state and track file modification times for the 'watcher' feature. These are standard operations for a development-focused AI agent. - [DYNAMIC_CONTEXT_INJECTION]: The skill documentation in
SKILL.mdmentions and demonstrates the!commandsyntax used in Claude Code. It explains how!lsor other shell commands can be executed. This is presented as educational content for the user and does not execute malicious code silently on skill load. - [EXTERNAL_DOWNLOADS]: The skill references a CLI tool (
altitude) and a web dashboard (app.learnaltitude.com). These are used for status reporting and progress syncing rather than downloading unverified remote code or scripts.
Audit Metadata