lov-refactor-api
Pass
Audited by Gen Agent Trust Hub on Sep 7, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill's workflow and instructions emphasize user-requested outcomes and local execution, explicitly avoiding implicit actions or bypassing safety protections.
- [SAFE]: The
profile_store.pyscript includes an explicit blacklist (SENSITIVE_PARTS) to filter out credentials, tokens, and other sensitive information from the shared profile storage. - [SAFE]: File operations for configuration persistence use atomic replacement via temporary files and restricted permissions (mode 0o600), ensuring data integrity and confidentiality.
- [SAFE]: The validation script and profile utility use safe parsing methods for YAML and JSON, avoiding unsafe dynamic execution patterns.
Audit Metadata