updating-lockstep
Pass
Audited by Gen Agent Trust Hub on May 20, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security issues or malicious patterns were detected. The skill performs standard repository maintenance tasks using established tools and follows a transparent logic flow.
- [EXTERNAL_DOWNLOADS]: The skill executes
git fetch origin --tagsto retrieve metadata from upstream repositories. This is a standard operation required for dependency management and submodule synchronization. - [COMMAND_EXECUTION]: Shell commands are used for git operations (fetch, checkout, commit, status) and project-specific tasks (
pnpm run lockstep). These are constrained by theallowed-toolspolicy and used for their intended purpose in a developer workflow. - [DATA_EXFILTRATION]: In CI mode, the skill encodes drift reports in Base64 to be emitted to
$GITHUB_OUTPUT. This is a standard integration pattern for passing structured data between GitHub Action steps and does not involve unauthorized data transmission to external servers.
Audit Metadata