design
Pass
Audited by Gen Agent Trust Hub on Oct 26, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes command-line tools including
gitfor version control management andgitleaksfor security auditing of the commit history. - [SAFE]: The skill enforces a security best practice by requiring a
gitleaksscan on the local commit log (gitleaks git --log-opts="@{u}..HEAD") prior to pushing code, effectively preventing the accidental exposure of secrets. - [SAFE]: The instructions include a 'scope gate' which is a restrictive policy that limits the agent's modifications to markup and styles. It explicitly forbids changes to security-critical areas such as API calls, persisted state, validation, routes, and permissions, ensuring the agent operates under the principle of least privilege.
Audit Metadata