skill-improve

Pass

Audited by Gen Agent Trust Hub on Jul 25, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses shell commands to interact with the local filesystem. Specifically, it uses ls to locate skills and session logs, and cat to read skill definitions and changelogs. These operations are restricted to the user's local environment and are standard for a development tool designed to automate file-based workflows.
  • [SAFE]: The skill implements a robust Human-in-the-Loop (HITL) approval process. It explicitly states in Phase 4 that no changes will be written to disk until the user provides explicit approval (e.g., 'accept all', 'accept 1 and 3'). This prevents unauthorized or accidental modifications to the codebase.
  • [SAFE]: The skill uses standard versioning (patch and minor bumps) and maintains a CHANGELOG.md. This is a best practice for traceability and allows the user to audit what changes were made and which session logs informed those changes.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 25, 2026, 02:27 PM
Security Audit — agent-trust-hub — skill-improve