large-file-refactor
Pass
Audited by Gen Agent Trust Hub on Aug 10, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [SAFE]: The skill's primary function is local static analysis of source code files. No network operations or suspicious data handling were identified.- [COMMAND_EXECUTION]: The helper script executes system commands (git, tokei, rg) using the subprocess module with argument lists. This approach prevents shell injection vulnerabilities, as the inputs are sanitized via path resolution and not passed directly to a shell.- [DATA_EXPOSURE]: The script reads local source code to calculate line counts. It explicitly ignores common sensitive or build directories such as .git, node_modules, and .venv to focus on relevant source files and avoid reading environment secrets or metadata.
Audit Metadata