velocity-tracker
Pass
Audited by Gen Agent Trust Hub on Jun 21, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the Bash and PowerShell tools to execute local scripts (
track.sh,track.ps1) for calculating metrics. These scripts are included in the skill's package and perform documented data analysis tasks. - [COMMAND_EXECUTION]: The shell scripts execute localized Python snippets and call a local database utility script (
bazinga_db.py) to retrieve project state. This interaction is limited to reading from an internal SQLite database within the project directory. - [SAFE]: No evidence of data exfiltration, credential harvesting, or obfuscation was detected. The skill's operations are transparent and align with its stated purpose of providing development velocity metrics.
Audit Metadata