compress
Pass
Audited by Gen Agent Trust Hub on Jul 30, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses benign shell commands for environment discovery and project context. It executes
git branchandgit statusto identify relevant markdown files and uses a local scriptdetect-caveman.shto check for the presence of thecavemanplugin via theclaudeCLI tool. - [EXTERNAL_DOWNLOADS]: The skill documentation references external tools including
markdownlint-cli2and acavemanplugin. It provides instructions for manual installation via standard package managers (npm) and does not perform any silent or unauthorized downloads at runtime. - [SAFE]: The skill implements security best practices for file operations, such as using
mktemp -dfor isolated temporary workspaces andtrapcommands to ensure temporary files are deleted upon exit. - [SAFE]: The skill includes a robust adversarial verification mechanism where a fresh-context subagent audits changes for semantic loss, preventing the model from grading its own edits and ensuring integrity of the compressed content.
Audit Metadata