harness-prepare

Pass

Audited by Gen Agent Trust Hub on Jul 24, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes npx @nextstage-brasil/harness sync to synchronize architectural rules. This is a standard operation within the context of the Harness project management framework.
  • [EXTERNAL_DOWNLOADS]: The use of npx to run the @nextstage-brasil/harness package involves downloading the package from the NPM registry. As this package is maintained by the skill's author, this is considered a standard vendor dependency.
  • [SAFE]: The skill implements a 'stop condition' mechanism that prevents execution on empty repositories, ensuring that it only attempts to analyze existing application code as intended.
  • [SAFE]: The skill correctly delegates complex analysis tasks to specialized worker skills, maintaining a modular and predictable orchestration flow.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 24, 2026, 08:16 PM
Security Audit — agent-trust-hub — harness-prepare