validate-change
Pass
Audited by Gen Agent Trust Hub on Jul 22, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute several command-line tools such as
just,cargo,uv, andgitto perform testing, formatting, and license checks. These are standard developer tools used within the repository's scope.\n- [REMOTE_CODE_EXECUTION]: No evidence of remote code execution from untrusted sources. All scripts referenced, such asscripts/licensing/license_diff.py, are local to the repository and executed viauv run.\n- [DATA_EXFILTRATION]: No network operations to non-whitelisted domains or sensitive data access patterns (e.g., SSH keys, AWS credentials) were detected.\n- [PROMPT_INJECTION]: No direct prompt injection or instructions to bypass safety guidelines or override system behavior were found.\n- [SAFE]: The skill's operations are consistent with its stated purpose of change validation for the NeMo Fabric project. All tools and resources are standard for the developer environment and belong to the vendor's expected workflow.
Audit Metadata