nav-loop
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill's test suite, found in the
functions/directory (e.g.,test_exit_gate.py,test_phase_detector.py), utilizessubprocess.runto execute local Python scripts for validation purposes. These calls are confined to testing the skill's own CLI tools and do not involve untrusted user input or remote code execution. - [SAFE]: No network operations, data exfiltration patterns, or hardcoded credentials were detected. The skill operates entirely on local project configuration and provided task context.
- [SAFE]: The autonomous 'loop mode' implementation includes a critical safety guard that requires a
max_iterationslimit when thenever_pause_on_stagnationflag is enabled, effectively preventing infinite loop scenarios during unattended operations. - [SAFE]: The skill uses structured
pilot-signalJSON blocks for status reporting, ensuring unambiguous state communication between the agent and the orchestration platform without relying on potentially injectable natural language instructions for core logic.
Audit Metadata