lcs-shared
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a repository for shared workflow contracts and templates, establishing a standardized format (OKF v0.2) for AI agent artifacts.
- [DYNAMIC_EXECUTION]: The regression test suite in
scripts/tests/test-validators.pyutilizessubprocess.runto execute Python and PowerShell scripts. The execution is safe as it targets only hardcoded or strictly derived paths within the skill's own directory structure to verify validator logic. - [COMMAND_EXECUTION]: The PowerShell test runner
scripts/tests/test-traceability-ps1.ps1uses the-ExecutionPolicy Bypassflag. This is a standard practice for running automated local tests and does not pose a general system risk. - [SAFE]: The
scripts/validate-okf.pyscript correctly usesyaml.safe_load()for parsing artifact frontmatter, which mitigates risks associated with unsafe deserialization of YAML data. - [SAFE]: No malicious patterns, data exfiltration, or prompt injection vectors were detected. The skill focuses on structural integrity and requirement traceability.
Audit Metadata