skills/jsmastery-pro/pilot/verify/Gen Agent Trust Hub

verify

Pass

Audited by Gen Agent Trust Hub on Jul 6, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses the Bash tool to execute local project scripts (e.g., package.json scripts, Makefile, docker-compose) and git commands (git worktree, git diff). This is the intended behavior for an acceptance engineering tool to verify application runtime behavior.
  • [SAFE]: The skill instructions do not contain any prompt injection attempts or efforts to bypass safety filters. No hardcoded credentials or sensitive data exfiltration patterns were found.
  • [EXTERNAL_DOWNLOADS]: The skill does not perform any external downloads from untrusted sources; it relies on the existing project infrastructure and local environment.
  • [DATA_EXFILTRATION]: No unauthorized network operations or patterns involving the transmission of sensitive local data to external domains were identified.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 6, 2026, 03:08 AM
Security Audit — agent-trust-hub — verify