repo-intake
Pass
Audited by Gen Agent Trust Hub on Aug 24, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill invokes
gitandnodecommands as subprocesses to identify repository properties (remotes, branches, files) and execute its own analysis scripts. These operations are scoped to the local repository environment. - [DATA_EXPOSURE]: Analysis artifacts and metadata are stored in a local cache directory (
~/.claude/cache/repo-intake/). The code does not contain any network operations that would exfiltrate this data. - [SAFE]: The skill demonstrates defensive programming by implementing sanitization functions (
mdSafeandmdCode) to escape repository-sourced text before rendering it into reports, reducing the risk of formatting manipulation from untrusted file content.
Audit Metadata