updating-lockstep

Pass

Audited by Gen Agent Trust Hub on May 20, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: No security issues or malicious patterns were detected. The skill performs standard repository maintenance tasks using established tools and follows a transparent logic flow.
  • [EXTERNAL_DOWNLOADS]: The skill executes git fetch origin --tags to retrieve metadata from upstream repositories. This is a standard operation required for dependency management and submodule synchronization.
  • [COMMAND_EXECUTION]: Shell commands are used for git operations (fetch, checkout, commit, status) and project-specific tasks (pnpm run lockstep). These are constrained by the allowed-tools policy and used for their intended purpose in a developer workflow.
  • [DATA_EXFILTRATION]: In CI mode, the skill encodes drift reports in Base64 to be emitted to $GITHUB_OUTPUT. This is a standard integration pattern for passing structured data between GitHub Action steps and does not involve unauthorized data transmission to external servers.
Audit Metadata
Risk Level
SAFE
Analyzed
May 20, 2026, 05:18 AM
Security Audit — agent-trust-hub — updating-lockstep