open-sourcing
Pass
Audited by Gen Agent Trust Hub on Jul 30, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes local shell scripts (detect_org.sh and check_readiness.sh) to automate the detection of organization profiles and audit repository readiness. These scripts rely on standard git and bash utilities to inspect local repository metadata and file structures.
- [EXTERNAL_DOWNLOADS]: The documentation references various well-known development and security tools (e.g., gitleaks, trufflehog, ruff, cargo-audit) and official GitHub Actions. These are standard recommendations for the described workflow and do not involve unverified remote code execution.
- [DATA_EXFILTRATION]: The skill's scripts analyze local git configuration (remotes) and commit history (emails) solely to determine the appropriate guidance profile. No data is transmitted to external servers, and the analysis is restricted to the local filesystem.
Audit Metadata