decide-before-you-look

Pass

Audited by Gen Agent Trust Hub on Sep 18, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The script scripts/call_block.py executes the git command using subprocess.run. This is a core feature used to verify that experiment registrations were committed to version control prior to the arrival of results. The script uses an argument list format and the -- separator, which prevents command injection vulnerabilities from untrusted file paths.
  • [SAFE]: The skill operates entirely locally without network access. No instances of prompt injection, data exfiltration, or obfuscation were detected. The Python script relies solely on the standard library, and the instructions are consistent with the stated purpose of improving experimental rigour.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 18, 2026, 07:36 PM