tc-state
Pass
Audited by Gen Agent Trust Hub on Jul 23, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes a local Python script (scripts/tc_state.py) to manage startup progress archives. The script is self-contained and relies exclusively on the Python standard library.
- [DATA_EXPOSURE]: The skill processes and stores project data in the user's home directory. It includes a redaction mechanism to mask emails, phone numbers, URLs, and authentication secrets (like API keys or passwords) when preparing data for export.
- [SAFE]: The script implements security best practices such as atomic file operations via temporary files and filename slugification to mitigate potential path traversal vulnerabilities when creating project directories.
Audit Metadata