validate-change

Pass

Audited by Gen Agent Trust Hub on Jul 22, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill instructs the agent to execute several command-line tools such as just, cargo, uv, and git to perform testing, formatting, and license checks. These are standard developer tools used within the repository's scope.\n- [REMOTE_CODE_EXECUTION]: No evidence of remote code execution from untrusted sources. All scripts referenced, such as scripts/licensing/license_diff.py, are local to the repository and executed via uv run.\n- [DATA_EXFILTRATION]: No network operations to non-whitelisted domains or sensitive data access patterns (e.g., SSH keys, AWS credentials) were detected.\n- [PROMPT_INJECTION]: No direct prompt injection or instructions to bypass safety guidelines or override system behavior were found.\n- [SAFE]: The skill's operations are consistent with its stated purpose of change validation for the NeMo Fabric project. All tools and resources are standard for the developer environment and belong to the vendor's expected workflow.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 22, 2026, 08:01 AM
Security Audit — agent-trust-hub — validate-change