develop-asc-change
Pass
Audited by Gen Agent Trust Hub on Oct 13, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill outlines a comprehensive software development lifecycle (SDLC) for a command-line interface, focusing on design notes, test-driven development, and schema validation.
- [SAFE]: Security-sensitive environment variables such as
ASC_KEY_ID,ASC_ISSUER_ID, andASC_PRIVATE_KEYare appropriately handled as configuration parameters for testing environments. The instructions explicitly recommend usingt.Setenvand temporary paths for isolation, which prevents credential leakage into the persistent environment. - [SAFE]: Validation logic relies on local repository artifacts (e.g.,
docs/openapi/latest.json), and the skill does not instruct the agent to download or execute code from untrusted external sources. - [SAFE]: The implementation and verification steps require explicit authority and cleanup of resources, demonstrating a focus on controlled environment management.
Audit Metadata