find-duplication
Pass
Audited by Gen Agent Trust Hub on Jul 3, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads and installs an external Go utility for code analysis.
- Evidence: It uses
go install github.com/mibk/dupl@latestto fetch the 'dupl' tool from GitHub. - [COMMAND_EXECUTION]: The skill executes several shell commands to analyze the repository context and search for patterns.
- Evidence:
git diffis used to identify changed files in the current branch. - Evidence:
ripgrep(rg) is used to perform semantic searches for similar code patterns. - Evidence: The
duplcommand is executed to find textual duplicates with a specific token threshold. - [SAFE]: All identified operations align with the stated goal of code deduplication. The tools utilized are common within the Go development ecosystem, and the skill's author context (openshift) is consistent with this type of professional developer tooling. No evidence of malicious behavior such as exfiltration, persistence, or obfuscation was detected.
Audit Metadata