ln-301-task-creator

Pass

Audited by Gen Agent Trust Hub on May 9, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill utilizes a sophisticated state-management system localized to the .hex-skills/ directory. This system tracks progress through various worker phases using structured JSON state and history files, ensuring project-scoped execution without external dependency for state persistence.
  • [SAFE]: Detailed security practices for destructive operations are documented in references/destructive_operation_safety.md. This reference mandates backup plans, rollback procedures, blast radius assessment, and environment guards for sensitive operations like database drops or file system deletions.
  • [SAFE]: The runtime scripts included with the skill (under references/scripts/) follow secure coding practices, utilizing standard Node.js built-in modules (node:fs, node:path, node:crypto) and implementing atomic writes and JSON schema validation for all state updates.
  • [SAFE]: External resource management for templates (described in references/template_loading_pattern.md) follows a project-independence model where templates are copied to the target project upon first use, allowing for local customization and preventing dependency on remote sources at runtime.
  • [SAFE]: No hardcoded credentials, suspicious network exfiltration, or obfuscated patterns were identified. The skill's architecture emphasizes transparency and adherence to strict validation rules (e.g., creation_quality_checklist.md).
Audit Metadata
Risk Level
SAFE
Analyzed
May 9, 2026, 08:28 PM