skills/railly/skills/handoff/Gen Agent Trust Hub

handoff

Pass

Audited by Gen Agent Trust Hub on Aug 8, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes read-only commands including git status, git log, and gh pr list to audit the local and remote repository state. These operations are strictly used for information gathering to populate the handoff report.- [EXTERNAL_DOWNLOADS]: The skill queries the npm registry using npm view to retrieve package version metadata. This targets a well-known service for legitimate project verification purposes.- [SAFE]: No evidence of prompt injection, data exfiltration, or persistence mechanisms was found. The skill provides clear instructions to avoid executing tests or builds, maintaining a secure, read-only posture. Reference to railly/skills is identified as a legitimate vendor resource belonging to the skill author.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 8, 2026, 11:40 PM