contribution-architect

Pass

Audited by Gen Agent Trust Hub on Jul 2, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill provides numerous Bash commands to analyze codebases, including find, grep, wc, and git log. These are used appropriately to identify file complexity, coupling, and technical debt.
  • [EXTERNAL_DOWNLOADS]: The instructions suggest running npm test or pytest --cov to check for test coverage. While these commands are standard for software development, they may trigger the download and execution of dependencies defined in the project's configuration files (e.g., package.json or requirements.txt).
  • [DATA_EXPOSURE]: The skill analyzes local repository data (git logs and source files) to identify project trends and single-author modules. This access is limited to the local environment for the purpose of architectural analysis and does not involve network exfiltration.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 2, 2026, 11:19 AM
Security Audit — agent-trust-hub — contribution-architect