skills/udecode/dotai/walkthrough/Gen Agent Trust Hub

walkthrough

Pass

Audited by Gen Agent Trust Hub on Aug 19, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes a Node.js utility script (scripts/diff-baseline.mjs) that executes local git commands, such as rev-parse, diff, and ls-files, to track and compare file changes within the repository.
  • [SAFE]: The instructions in SKILL.md contain specific security guidelines for protecting sensitive data, explicitly advising users to redact credentials, tokens, and personal information before using image annotation tools.
  • [SAFE]: The state verification logic in scripts/diff-baseline.mjs uses SHA256 hashing to compare repository snapshots locally and warns against publishing these hashes to maintain project security.
  • [SAFE]: The script uses node:child_process.spawnSync with an array of arguments for executing Git commands, which is a secure pattern that prevents shell injection vulnerabilities.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 19, 2026, 05:32 PM
Security Audit — agent-trust-hub — walkthrough