automated-assessment

Pass

Audited by Gen Agent Trust Hub on May 12, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes shell commands defined in checkpoint configuration files to verify project status (e.g., running composer validate or phpunit). A dedicated security filter in the bash runner (is_safe_eval_command) validates every command against a whitelist of safe development tools and explicitly blocks dangerous operations, path traversal, and command chaining.\n- [EXTERNAL_DOWNLOADS]: The skill utilizes the GitHub CLI (gh api) to retrieve repository metadata and workflow contents for compliance verification. These network operations are restricted to read-only API calls and are essential for verifying repository health and release readiness as part of the documented auditing process.
Audit Metadata
Risk Level
SAFE
Analyzed
May 12, 2026, 04:59 PM