skills/jh941213/my-cc-harness/verify/Gen Agent Trust Hub

verify

Pass

Audited by Gen Agent Trust Hub on Apr 9, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes standard development lifecycle commands using the Bash tool, including build scripts (npm run build) and test runners (vitest, jest, pytest, go test, cargo test), which are necessary for verifying project integrity.- [EXTERNAL_DOWNLOADS]: Utilizes npx to run various verification tools such as tsc, eslint, biome, madge, and knip. These tools may be downloaded from the official NPM registry if not already present in the environment.- [COMMAND_EXECUTION]: Evaluates the project environment by scanning source code and configuration files (e.g., package.json) for structural issues and security vulnerabilities using gitleaks and ast-grep (sg). While this process involves processing untrusted local data, it follows expected developer workflows. (Vulnerability Surface Analysis): Ingestion points: package.json and project source code; Boundary markers: None; Capability inventory: Bash, Edit, Read; Sanitization: None.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 9, 2026, 04:23 PM
Security Audit — agent-trust-hub — verify