context-management

Pass

Audited by Gen Agent Trust Hub on Jun 17, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The script scripts/ctx_checkpoint.py uses subprocess.run to execute standard git commands (git rev-parse, git log). This is used solely to gather non-sensitive session metadata (branch name and last commit hash) to provide context for checkpoints.
  • [DATA_EXPOSURE]: The skill stores session data in a project-local .ctx/ directory. It includes a safety mechanism in scripts/ctx_index.py that automatically appends .ctx/ to the project's .gitignore file on its first run, preventing the accidental exposure of session-local data to version control.
  • [REMOTE_CODE_EXECUTION]: The skill has zero external dependencies and does not perform any remote code downloads or execution. All operations are performed using standard Python 3.8+ modules (specifically sqlite3 for indexing).
  • [COMMAND_EXECUTION]: A shell script scripts/test_ctx.sh is provided for smoke testing. It executes the skill's own Python scripts against synthetic data in a temporary directory to verify installation integrity.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 17, 2026, 06:45 AM
Security Audit — agent-trust-hub — context-management