skills/nexu-io/nexu/sync-specs/Gen Agent Trust Hub

sync-specs

Pass

Audited by Gen Agent Trust Hub on Jul 9, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses standard git commands (git diff, git merge-base) to identify which files have changed in the local repository. This behavior is entirely consistent with its purpose of documentation maintenance.
  • [DATA_EXPOSURE]: The skill reads project-level file paths and code contents to determine which documentation needs updating. No access to sensitive system directories (~/.ssh, ~/.aws) or credential files was detected.
  • [EXTERNAL_DOWNLOADS]: The skill does not perform any network operations, external downloads, or remote script executions. All analysis is performed locally on the existing codebase.
  • [SAFE]: The provided bash script (check-doc-drift.sh) contains simple logic for checking file path patterns and does not contain any malicious or obfuscated code.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 9, 2026, 08:17 AM
Security Audit — agent-trust-hub — sync-specs