skills/leobai03/tc/tc-state/Gen Agent Trust Hub

tc-state

Pass

Audited by Gen Agent Trust Hub on Jul 23, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes a local Python script (scripts/tc_state.py) to manage startup progress archives. The script is self-contained and relies exclusively on the Python standard library.
  • [DATA_EXPOSURE]: The skill processes and stores project data in the user's home directory. It includes a redaction mechanism to mask emails, phone numbers, URLs, and authentication secrets (like API keys or passwords) when preparing data for export.
  • [SAFE]: The script implements security best practices such as atomic file operations via temporary files and filename slugification to mitigate potential path traversal vulnerabilities when creating project directories.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 23, 2026, 09:16 AM
Security Audit — agent-trust-hub — tc-state