gw-config-management

Pass

Audited by Gen Agent Trust Hub on May 15, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill documents the use of shell hooks (e.g., pre-checkout, post-checkout) to automate tasks like dependency installation (pnpm install). These are legitimate features of the 'gw' tool for environment setup.
  • [DATA_EXFILTRATION]: The skill guides the configuration of autoCopyFiles to synchronize local secrets and environment variables across project worktrees. This handles sensitive paths like .env and secrets/ but only for local file management.
  • [EXTERNAL_DOWNLOADS]: References to the author's GitHub repository are used for fetching configuration schemas and as the source for skill installation.
Audit Metadata
Risk Level
SAFE
Analyzed
May 15, 2026, 06:36 PM
Security Audit — agent-trust-hub — gw-config-management