repo-xray

Pass

Audited by Gen Agent Trust Hub on Jun 26, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses python xray.py for performing codebase analysis. It also includes instructions for a one-time setup of a TypeScript scanner using npm install and npm run build within a sub-directory.
  • [EXTERNAL_DOWNLOADS]: Setup instructions involve fetching dependencies from the official npm registry for the TypeScript scanning component.
  • [SAFE]: No malicious patterns detected. The skill implements security best practices by including a comprehensive ignore list in configs/ignore_patterns.json to exclude sensitive directories and files (e.g., .env, .git, .ssh, credentials, and database files) from being processed by the agent.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 26, 2026, 03:32 AM
Security Audit — agent-trust-hub — repo-xray