skills/mpurbo/hsdd/hsdd-contract/Gen Agent Trust Hub

hsdd-contract

Pass

Audited by Gen Agent Trust Hub on Oct 12, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill provides a Node.js script (scripts/gen-registry.mjs) to be executed by the user.
  • The script's primary function is to read file systems locally using readdirSync and readFileSync and write to INDEX.md files using writeFileSync within the current working directory.
  • Analysis of the script confirms it is dependency-free, uses only standard Node.js built-in modules (node:fs, node:path), and performs deterministic string manipulation on Markdown frontmatter.
  • No dangerous command injection sinks or external network requests were found in the implementation.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 12, 2026, 05:24 AM