pitchfork

Pass

Audited by Gen Agent Trust Hub on Jun 16, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill documents the use of commands to manage background processes, including the execution of arbitrary shell strings via the run command, ready_cmd checks, and lifecycle hooks (e.g., on_ready, on_fail).
  • [COMMAND_EXECUTION]: Provides instructions for modifying shell initialization profiles such as ~/.bashrc, ~/.zshrc, and config.fish to enable the tool's shell hook functionality for automatic service management based on directory navigation.
  • [COMMAND_EXECUTION]: Includes documentation for using sudo to register background services at the OS level (using systemd or launchd) via the pitchfork boot enable command.
  • [EXTERNAL_DOWNLOADS]: Recommends installation through reputable sources including the official GitHub repository (jdx/pitchfork) and standard package managers like mise, cargo, and brew.
  • [COMMAND_EXECUTION]: The skill facilitates the ingestion of configuration from project-local pitchfork.toml files which define service behavior.
  • Ingestion points: Project-local pitchfork.toml and global config.toml files.
  • Boundary markers: None identified.
  • Capability inventory: Execution of background daemons, cron-scheduled tasks, and automated lifecycle shell scripts.
  • Sanitization: None; commands are executed as specified in the configuration files to support developer automation workflows.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 16, 2026, 12:54 AM
Security Audit — agent-trust-hub — pitchfork