context-management
Pass
Audited by Gen Agent Trust Hub on Jun 17, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/ctx_checkpoint.pyusessubprocess.runto execute standardgitcommands (git rev-parse,git log). This is used solely to gather non-sensitive session metadata (branch name and last commit hash) to provide context for checkpoints. - [DATA_EXPOSURE]: The skill stores session data in a project-local
.ctx/directory. It includes a safety mechanism inscripts/ctx_index.pythat automatically appends.ctx/to the project's.gitignorefile on its first run, preventing the accidental exposure of session-local data to version control. - [REMOTE_CODE_EXECUTION]: The skill has zero external dependencies and does not perform any remote code downloads or execution. All operations are performed using standard Python 3.8+ modules (specifically
sqlite3for indexing). - [COMMAND_EXECUTION]: A shell script
scripts/test_ctx.shis provided for smoke testing. It executes the skill's own Python scripts against synthetic data in a temporary directory to verify installation integrity.
Audit Metadata