command-development

Pass

Audited by Gen Agent Trust Hub on Jun 22, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill consists entirely of documentation and educational examples in Markdown format. It does not include executable code, scripts, or binary assets.
  • [COMMAND_EXECUTION]: The skill provides numerous examples of bash command execution (e.g., using git, npm, and system utilities). These are presented strictly as instructional patterns for developers. The documentation explicitly advocates for the principle of least privilege, recommending restricted tool permissions (e.g., 'allowed-tools: Bash(git:*)') to ensure secure operation.
  • [EXTERNAL_DOWNLOADS]: References to external resources (GitHub, NPM, and official package registries) are limited to well-known, trusted technology services and organizations used for standard development workflows.
  • [SAFE]: Heuristic detections regarding destructive system commands (such as 'dd' or 'rm') were evaluated and determined to be benign. The 'dd' command is used in the context of creating large test files for performance evaluation, and 'rm' commands are used for cleaning up temporary test artifacts.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 22, 2026, 09:59 PM
Security Audit — agent-trust-hub — command-development