context-optimizer

Pass

Audited by Gen Agent Trust Hub on Apr 26, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The script scripts/path_validation.py uses subprocess.run to execute standard git commands (git rev-parse). These calls are used to identify the repository root and worktrees to provide a secure anchor for file system operations. The arguments are hardcoded and not influenced by user input.- [EXTERNAL_DOWNLOADS]: The skill documentation instructs users to install tiktoken via pip. This is a well-known, legitimate library provided by OpenAI for local, offline tokenization. It is used to calculate context usage metrics without sending data to external APIs.- [DATA_EXPOSURE]: The suite of scripts performs read and write operations on local markdown files within the user's repository. These operations are essential for the skill's primary purpose of documentation optimization. Security is maintained through the validate_path_within_repo function, which prevents access to files outside the repository boundary (CWE-22 prevention).
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 26, 2026, 03:46 PM