a365-code-validator
Pass
Audited by Gen Agent Trust Hub on Jul 29, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- Standard Tool Usage: The skill uses common developer tools such as
node,az, andSelect-Stringto inspect local project configuration and logs. These are used within their intended purpose for debugging and do not present unusual security risks. - Diagnostic Script Execution: The skill includes a standalone JavaScript runner (
a365-code-validator.js) that performs static analysis on the local codebase. This script operates locally, focusing on identifying configuration patterns in Python, Node.js, and .NET projects without performing external network operations. - Controlled Remediation: When issues are detected, the skill offers guided remediation. It prioritizes creating a 'fix plan' and requires explicit user confirmation before applying deterministic, low-risk changes to configuration templates or environment files.
- Information Safety: The skill explicitly instructs the agent to maintain 'support-safe' output, ensuring that internal infrastructure details, private IDs, or sensitive credentials are never included in the generated reports.
Audit Metadata