skills/sd0xdev/sd0x-harness/ask/Gen Agent Trust Hub

ask

Pass

Audited by Gen Agent Trust Hub on Aug 24, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes standard Git commands such as git branch, git status, and git log, as well as a local Node.js utility scripts/resolve-feature.js to gather session context. These operations are scoped to information gathering and do not modify the repository.
  • [DATA_EXPOSURE]: Includes explicit path security controls that reject traversal attempts (e.g., .. segments), skip sensitive files like .env or credentials.*, and implement high-confidence redaction for secrets found in output.
  • [SAFE]: Enforces a strict read-only policy by explicitly prohibiting mutating Git commands like commit, push, reset, stash, and restore. It further limits tool access by omitting Edit and Write capabilities from the allowed-tools manifest.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 24, 2026, 01:43 PM
Security Audit — agent-trust-hub — ask