automated-assessment
Pass
Audited by Gen Agent Trust Hub on May 12, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill executes shell commands defined in checkpoint configuration files to verify project status (e.g., running
composer validateorphpunit). A dedicated security filter in the bash runner (is_safe_eval_command) validates every command against a whitelist of safe development tools and explicitly blocks dangerous operations, path traversal, and command chaining.\n- [EXTERNAL_DOWNLOADS]: The skill utilizes the GitHub CLI (gh api) to retrieve repository metadata and workflow contents for compliance verification. These network operations are restricted to read-only API calls and are essential for verifying repository health and release readiness as part of the documented auditing process.
Audit Metadata