vibe-clean
Pass
Audited by Gen Agent Trust Hub on May 16, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill workflow involves executing shell commands to perform diagnostics and characterization tests. This includes running test suites (
pytest), mutation testing tools (mutmut,stryker), and package managers for verification purposes (pip show,npm view). - [EXTERNAL_DOWNLOADS]: The instructions reference official package registries (PyPI, npm) and well-known security research from Trend Micro regarding supply-chain attacks. It also recommends the use of established security tools like Gitleaks and TruffleHog.
- [SAFE]: The skill implements a 'security-first' approach to code refactoring, explicitly instructing the agent to treat existing code, tests, and comments as untrusted until verified through runtime observation and dependency audits.
Audit Metadata