skills/mehdic/cdc/velocity-tracker/Gen Agent Trust Hub

velocity-tracker

Pass

Audited by Gen Agent Trust Hub on Jun 21, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses the Bash and PowerShell tools to execute local scripts (track.sh, track.ps1) for calculating metrics. These scripts are included in the skill's package and perform documented data analysis tasks.
  • [COMMAND_EXECUTION]: The shell scripts execute localized Python snippets and call a local database utility script (bazinga_db.py) to retrieve project state. This interaction is limited to reading from an internal SQLite database within the project directory.
  • [SAFE]: No evidence of data exfiltration, credential harvesting, or obfuscation was detected. The skill's operations are transparent and align with its stated purpose of providing development velocity metrics.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 21, 2026, 05:57 PM
Security Audit — agent-trust-hub — velocity-tracker