cleanup-dedupe

Pass

Audited by Gen Agent Trust Hub on Jun 28, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill runs several shell commands to analyze the codebase and verify the integrity of refactored code. These include jscpd for duplication detection, and tsc, eslint, pytest, and bun test for post-refactoring verification.
  • [EXTERNAL_DOWNLOADS]: The skill uses bunx and npx to execute jscpd. This behavior fetches the jscpd package from the npm registry if it is not already available in the local environment. jscpd is a well-known open-source tool for multi-language code clone detection.
  • [DATA_EXPOSURE]: The skill generates duplication assessment reports and temporary output files within the local project directory (.claude/cleanup-reports/) and system temporary directory (/tmp/jscpd-out). This data is used locally for analysis and is not transmitted externally.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 28, 2026, 12:34 AM
Security Audit — agent-trust-hub — cleanup-dedupe