verification-before-completion

Pass

Audited by Gen Agent Trust Hub on Apr 1, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill implements a comprehensive verification process using standard development tools like pytest, go test, and npm test. These commands are executed via the Bash tool as part of the intended verification workflow.
  • [SAFE]: A specialized Python script (scripts/validate.py) provides automated validation for Python, JavaScript, and Go files. It uses safe subprocess.run calls with argument lists and includes defensive checks for dangerous patterns such as eval() and exec() usage in target files.
  • [SAFE]: The skill incorporates security best practices by instructing the agent to scan for sensitive information (API keys, passwords, secrets) and leftover debug artifacts (print statements, debuggers) using grep before completion.
  • [SAFE]: All operations are performed on local files and standard project dependencies. No external downloads from untrusted sources or hidden network operations were detected.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 1, 2026, 05:55 AM
Security Audit — agent-trust-hub — verification-before-completion