lcs-shared

Pass

Audited by Gen Agent Trust Hub on Sep 16, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill serves as a repository for shared workflow contracts and templates, establishing a standardized format (OKF v0.2) for AI agent artifacts.
  • [DYNAMIC_EXECUTION]: The regression test suite in scripts/tests/test-validators.py utilizes subprocess.run to execute Python and PowerShell scripts. The execution is safe as it targets only hardcoded or strictly derived paths within the skill's own directory structure to verify validator logic.
  • [COMMAND_EXECUTION]: The PowerShell test runner scripts/tests/test-traceability-ps1.ps1 uses the -ExecutionPolicy Bypass flag. This is a standard practice for running automated local tests and does not pose a general system risk.
  • [SAFE]: The scripts/validate-okf.py script correctly uses yaml.safe_load() for parsing artifact frontmatter, which mitigates risks associated with unsafe deserialization of YAML data.
  • [SAFE]: No malicious patterns, data exfiltration, or prompt injection vectors were detected. The skill focuses on structural integrity and requirement traceability.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 16, 2026, 12:21 PM
Security Audit — agent-trust-hub — lcs-shared