skills/mpurbo/hsdd/hsdd-config/Gen Agent Trust Hub

hsdd-config

Pass

Audited by Gen Agent Trust Hub on Oct 12, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill instructs the agent to use shell commands for state verification and file integrity checks.
  • Uses git -C hsdd rev-parse --short HEAD to verify the submodule status and commit SHA of the governance repository.
  • Uses complex shell pipelines involving diff, sed, tail, and process substitution (e.g., diff <(tail -n +2 hsdd-context/{phase-id}.md) <(...)) to ensure consistency between generic phase context files and their method-specific derivatives.
  • [DATA_EXPOSURE]: The skill accesses local project files to build context and discover environment settings.
  • Reads metadata files like Cargo.toml, package.json, and CLAUDE.md to identify the tech stack and project architecture.
  • Reads various governance files within the hsdd/ directory, including conventions, specifications, contracts, and ADRs (Architecture Decision Records), to extract relevant phase data.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 12, 2026, 05:24 AM