competitors-analysis

Pass

Audited by Gen Agent Trust Hub on Sep 8, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses shell commands (mkdir, git clone, cat, grep, ls, find) to manage and inspect local competitor repositories. These are standard development tools used as intended for repository profiling.
  • [REMOTE_CODE_EXECUTION]: The shell script update-competitors.sh performs automated git clone and git pull operations. While this involves downloading external code, it targets specific repositories defined by the user in the configuration section and does not execute the contents of those repositories automatically.
  • [SAFE]: The skill implements best practices for secret management by not including hardcoded credentials and provides a .security-scan-passed file indicating previous validation. The instructions explicitly forbid speculative analysis, requiring all claims to be cited from local source files.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 8, 2026, 06:55 AM
Security Audit — agent-trust-hub — competitors-analysis