precap
Pass
Audited by Gen Agent Trust Hub on Sep 24, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements a structured workflow for task management using a local Python helper script (
scripts/precap.py). - Technical analysis of the Python script shows that all repository interactions (via
git) are performed usingsubprocess.runwith a list of arguments, which is a secure implementation that avoids shell injection risks. - The script's functionality is limited to reading the
precap.mdfile, checking local file existence, and querying the local Git state for drift detection. - No network connectivity, credential access, or attempts at persistence or privilege escalation were found.
- The instructions emphasize grounding all claims in existing repository data, which enhances the security and reliability of the agent's actions.
Audit Metadata