claude-settings-audit
Pass
Audited by Gen Agent Trust Hub on Sep 6, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses standard, read-only system commands (
ls,find,cat) to analyze the repository structure and detect project dependencies. - [SAFE]: All recommended permissions in the generated
settings.jsonare scoped to read-only operations (e.g.,git status,npm list,python --version). - [SAFE]: The skill explicitly instructs the agent to avoid including commands that modify state, absolute paths, or custom scripts, adhering to secure least-privilege principles.
- [SAFE]: External domains listed for documentation fetching target well-known, trusted services such as Sentry, GitHub, and official framework documentation sites (Django, React, etc.).
Audit Metadata