jr-rails-second-opinion
Pass
Audited by Gen Agent Trust Hub on May 10, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses shell commands to detect the user's environment and available CLI tools. It also executes legitimate developer tools such as git and gh to retrieve code diffs for analysis. This is standard behavior for a development automation tool.\n- [EXTERNAL_DOWNLOADS]: The skill references several well-known and trusted AI CLI tools (e.g., Claude Code, Codex, Aider) and suggests their installation via official package managers if they are not already present. These tools are reputable within the developer community.\n- [DATA_EXFILTRATION]: Source code diffs are processed and sent to external AI providers for review. This inherent data flow is mitigated by explicit instructions within the skill to scrub secrets, credentials, and sensitive environment files before any data is sent externally, following security best practices.
Audit Metadata