post-dev-recap
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security issues or malicious patterns were detected. The skill provides clear workflow boundaries and explicitly prohibits dangerous mutations.
- [COMMAND_EXECUTION]: Executes standard, non-mutating Git commands (
git rev-parse --show-toplevel) to enforce repository boundaries and invokes a local script (node scripts/detect-scope.js) to analyze local changes. - [INDIRECT_PROMPT_INJECTION]: Analyzes repository metadata, code structure, and user questions. This risk is managed appropriately through a built-in safety gate that leverages inherited secret redaction via
scripts/security-redact.jsfrom its sub-skills.
Audit Metadata