doc-sync-tool
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
child_process.execSyncinrename-quick.jsto execute system commands (find) for locating files. It also includes several shell scripts (rename-to-uppercase.sh,run-sync.sh,run-watch.sh,test.sh) that utilize standard Unix utilities likefind,mv, andrmfor file management tasks.- [SAFE]: The primary synchronization logic insync.jsandwatch.jsuses native Node.js filesystem APIs (fs) to copy content between specific markdown files. No network requests, external downloads, or data exfiltration attempts were found.- [SAFE]: Analysis of the scripts and documentation confirms that the tool performs its stated functions without obfuscation or hidden malicious intent.
Audit Metadata