verify-custom-rules

Pass

Audited by Gen Agent Trust Hub on May 14, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill uses npx -y cc-safety-net within the workflow in SKILL.md. This command downloads and executes the cc-safety-net package from the NPM registry if it is not already installed locally.
  • [COMMAND_EXECUTION]: The skill executes multiple shell commands using npx to verify configurations (--verify-config) and retrieve documentation (--custom-rules-doc). These commands are necessary for the skill's primary function.
  • [DATA_EXPOSURE]: The skill instructions involve reading and proposing edits to local configuration files located at ~/.cc-safety-net/config.json and .safety-net.json. This access is restricted to the specific configuration files managed by the safety tool and includes a requirement to ask for user confirmation before making edits.
Audit Metadata
Risk Level
SAFE
Analyzed
May 14, 2026, 07:58 AM
Security Audit — agent-trust-hub — verify-custom-rules