context-optimizer
Pass
Audited by Gen Agent Trust Hub on Apr 26, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/path_validation.pyusessubprocess.runto execute standardgitcommands (git rev-parse). These calls are used to identify the repository root and worktrees to provide a secure anchor for file system operations. The arguments are hardcoded and not influenced by user input.- [EXTERNAL_DOWNLOADS]: The skill documentation instructs users to installtiktokenviapip. This is a well-known, legitimate library provided by OpenAI for local, offline tokenization. It is used to calculate context usage metrics without sending data to external APIs.- [DATA_EXPOSURE]: The suite of scripts performs read and write operations on local markdown files within the user's repository. These operations are essential for the skill's primary purpose of documentation optimization. Security is maintained through thevalidate_path_within_repofunction, which prevents access to files outside the repository boundary (CWE-22 prevention).
Audit Metadata