decide-before-you-look
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/call_block.pyexecutes thegitcommand usingsubprocess.run. This is a core feature used to verify that experiment registrations were committed to version control prior to the arrival of results. The script uses an argument list format and the--separator, which prevents command injection vulnerabilities from untrusted file paths. - [SAFE]: The skill operates entirely locally without network access. No instances of prompt injection, data exfiltration, or obfuscation were detected. The Python script relies solely on the standard library, and the instructions are consistent with the stated purpose of improving experimental rigour.
Audit Metadata