hsdd-contract
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides a Node.js script (
scripts/gen-registry.mjs) to be executed by the user. - The script's primary function is to read file systems locally using
readdirSyncandreadFileSyncand write toINDEX.mdfiles usingwriteFileSyncwithin the current working directory. - Analysis of the script confirms it is dependency-free, uses only standard Node.js built-in modules (
node:fs,node:path), and performs deterministic string manipulation on Markdown frontmatter. - No dangerous command injection sinks or external network requests were found in the implementation.
Audit Metadata