autonomous-loops
Pass
Audited by Gen Agent Trust Hub on Mar 24, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill documents the use of
claude -pand GitHub CLI (gh) for legitimate development workflow automation, such as creating pull requests and monitoring CI runs. - [EXTERNAL_DOWNLOADS]: Mentions community-created tools like
continuous-claudeandRalphinhobut includes explicit security warnings advising users to review source code and avoid piping external scripts directly to the shell. - [PROMPT_INJECTION]: Defines operational magic phrases (e.g., 'CONTINUOUS_CLAUDE_PROJECT_COMPLETE') as termination signals for loops. These are functional triggers rather than malicious bypass attempts.
- [DATA_EXFILTRATION]: No unauthorized data transfer, credential harvesting, or access to sensitive local configuration files was observed. Persistence is limited to standard tool session directories.
Audit Metadata