synthesis-repo-guard
Pass
Audited by Gen Agent Trust Hub on May 12, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill includes a Python script (
repo_sync_check.py) that executes system commands viasubprocess.run. These commands are used to query Git repository status (git status,git rev-list) and to provide audio notifications on macOS (afplay,say). The execution uses safe argument passing (list-based) and avoids the use ofshell=True, mitigating command injection risks.- [SAFE]: The skill functions as a local monitoring tool. It does not access sensitive credential files, perform network requests to untrusted domains, or include obfuscated code. The instructions for persistence (e.g., cron or launchd) are legitimate user-facing configuration steps for a background utility and do not involve automated or hidden setup.
Audit Metadata