check-changes
Pass
Audited by Gen Agent Trust Hub on Aug 12, 2026
Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes local
gitcommands to retrieve repository diffs. The instructions specifically mandate the use ofargvlists rather than shell strings, which follows security best practices to prevent command injection vulnerabilities. - [DATA_EXFILTRATION]: Source code diffs are retrieved and transmitted to the
check_changestool for analysis. This is the intended primary function of the skill and occurs through the established MCP (Model Context Protocol) transport. - [SAFE]: The skill includes comprehensive guidelines in
mcp-rules.mdthat explicitly forbid the agent from probing for tokens, bypassing IDE security controls, or inventing organizational policies, which significantly reduces the risk of autonomous misbehavior.
Audit Metadata