library-docs
Pass
Audited by Gen Agent Trust Hub on Jul 30, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill performs authorized repository analysis by reading standard manifest files such as
package.json,pubspec.yaml,go.mod,Cargo.toml,pyproject.toml, andGemfileto identify project dependencies. - [SAFE]: The skill executes local git commands (
git log) and grep searches for legitimate purposes, such as timestamping the generated reference and identifying code affected by library upgrades during the migration draft process. - [SAFE]: The skill fetches documentation and changelog information from official project websites and GitHub repositories to ensure usage conventions are pinned to the specific versions used by the project.
- [SAFE]: The creation of a repository-local skill file (
.claude/skills/library-use/SKILL.md) and associated symlinks are intended mechanisms for providing persistent repository-specific context to AI agents and do not constitute malicious persistence or privilege escalation.
Audit Metadata