skills/posit-dev/positron/add-policy/Gen Agent Trust Hub

add-policy

Pass

Audited by Gen Agent Trust Hub on Jul 30, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill serves as a developer guide for contributing to the VS Code configuration policy system. All instructions are consistent with the architectural patterns of the target repository.
  • [COMMAND_EXECUTION]: The skill instructs users to run npm run compile-check-ts-native and npm run export-policy-data. These are standard development scripts used to validate code and synchronize policy catalogs.
  • [EXTERNAL_DOWNLOADS]: It describes the export-policy-data script fetching product.json files from GitHub via API. This is a routine operation targeting a well-known service to aggregate extension policy data.
  • [CREDENTIALS_UNSAFE]: Mentions the management of GITHUB_TOKEN for API authentication. It correctly points to using the official GitHub CLI (gh) or OAuth flows for secure token acquisition during the development process.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 30, 2026, 01:46 PM
Security Audit — agent-trust-hub — add-policy