security-diff-scan
Pass
Audited by Gen Agent Trust Hub on Jul 29, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- Standard Command Execution: The skill executes local Python scripts, such as
generate_rank_input.pyandfinalize_scan_contract.py, to manage the scan workflow and generate reports. These are internal utility scripts used for data processing and artifact assembly. - Git Integration: The skill interacts with Git to resolve pull requests, commits, and branch differences. This is essential for defining the scope of the security review.
- Controlled Workspace Management: It uses specialized tools to manage scan workspaces and session IDs, which helps maintain isolated analysis environments.
- Artifact Generation: The skill writes analysis results to structured JSON and Markdown files within a designated
scan_dir. This behavior is expected for generating audit trails and findings reports.
Audit Metadata