project-audit
Pass
Audited by Gen Agent Trust Hub on Aug 24, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses a shell script
scripts/run-skill.shto execute a local Node.js audit script (scripts/audit.js). This is standard behavior for local tooling and does not involve remote code or privilege escalation. - [DATA_EXPOSURE]: The audit script reads local file system metadata and contents (README, LICENSE, package manifests, CI configs) to calculate health scores. No sensitive files (e.g.,
.env,.ssh/,.aws/) are targeted, and no data exfiltration via network calls is present. - [REMOTE_CODE_EXECUTION]: The script uses standard Node.js libraries (
fs,path) and callsgitRepoRootto identify the repository context. It does not download or execute external scripts from the internet.
Audit Metadata