sync-workbuddy
Pass
Audited by Gen Agent Trust Hub on Oct 11, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill includes a shell script (
sync-workbuddy.sh) that executes file system commands (mkdir,cp,find). These commands are used solely for the purpose of identifying and copying skill directories from a source path to a destination path as described in the documentation. The script follows shell best practices, such as quoting variables to prevent word splitting and usingset -euo pipefailfor error handling. - [SAFE]: No malicious patterns were identified. The skill does not perform network requests, does not access sensitive credential files (like .ssh or .aws), and contains no obfuscated code or instructions. The operations are local to the user's environment and focused on the intended purpose of managing agent skills.
Audit Metadata