review
Pass
Audited by Gen Agent Trust Hub on Aug 25, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes standard development tools for code analysis including
git diff,git log,npx madge(circular dependency check),ast-grep(pattern matching),gitleaks(secret scanning), andscc(complexity statistics). All commands are restricted to the local repository context and are typical for code review workflows.\n- [DATA_EXPOSURE]: The skill explicitly includes a check for hardcoded secrets and API keys usinggitleaks detect, which is a defensive security measure rather than a malicious exposure.\n- [SAFE]: No remote code execution, obfuscation, or unauthorized data exfiltration patterns were detected. The use of sub-agents for specialized reviews (security, QA) follows standard operational patterns for AI-assisted development.
Audit Metadata