go
Pass
Audited by Gen Agent Trust Hub on Sep 28, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses Bash for standard development tasks including Git operations (push, pull, branch creation), GitHub CLI (gh repo), and document formatting (prettier). These commands are used to maintain repository state and documentation as part of the intended workflow.
- [DYNAMIC_EXECUTION]: Employs
uv runto execute a validation script (preflight_validator.py) during the preflight phase. The script location is resolved using a local helper (cc-plugin-root), ensuring that only plugin-internal validation logic is executed. - [DATA_EXFILTRATION]: Performs
git remote get-urlto extract the repository's base URL, which is then used with theopencommand to facilitate viewing the generated ADR and design spec files in a web browser. This is a functional requirement for documentation review and does not represent an exfiltration threat.
Audit Metadata