find-duplication

Pass

Audited by Gen Agent Trust Hub on Jul 3, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill downloads and installs an external Go utility for code analysis.
  • Evidence: It uses go install github.com/mibk/dupl@latest to fetch the 'dupl' tool from GitHub.
  • [COMMAND_EXECUTION]: The skill executes several shell commands to analyze the repository context and search for patterns.
  • Evidence: git diff is used to identify changed files in the current branch.
  • Evidence: ripgrep (rg) is used to perform semantic searches for similar code patterns.
  • Evidence: The dupl command is executed to find textual duplicates with a specific token threshold.
  • [SAFE]: All identified operations align with the stated goal of code deduplication. The tools utilized are common within the Go development ecosystem, and the skill's author context (openshift) is consistent with this type of professional developer tooling. No evidence of malicious behavior such as exfiltration, persistence, or obfuscation was detected.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 3, 2026, 11:04 AM
Security Audit — agent-trust-hub — find-duplication