ln-162-skill-reviewer
Pass
Audited by Gen Agent Trust Hub on May 12, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill operates as a compliance reviewer and repository auditor. All automated checks and runtime logic are implemented via local scripts (
run_checks.sh,repo_review_suite.mjs,agent_runner.mjs) included in the skill's distribution. No external network requests, obfuscation, or unauthorized data access patterns were identified during the analysis. - [COMMAND_EXECUTION]: The skill executes local scripts to perform file analysis and process management. For example,
run_checks.shutilizes standard utilities (grep,sed,wc) to verify skill frontmatter and structure, while Node.js scripts manage state transitions and test execution. These actions are aligned with the skill's primary purpose as a development tool. - [SAFE]: External agent interaction is handled via the
agent_runner.mjsscript, which spawns local CLI processes. The configuration for these tools (found inagent_registry.json) uses standard non-interactive flags. The workflow includes a mandatory 'Critical Verification' step where the host agent must independently verify all suggestions, providing a layer of human-in-the-loop oversight.
Audit Metadata