skills/umputun/revdiff/revdiff-plan/Gen Agent Trust Hub

revdiff-plan

Pass

Audited by Gen Agent Trust Hub on Apr 17, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill recommends installing revdiff (via Homebrew from umputun/apps/revdiff) and jq. revdiff is a utility maintained by the skill author, and jq is a well-known JSON processing tool. These are standard dependencies for the skill's functionality.
  • [COMMAND_EXECUTION]: Executes local bash scripts (extract-last-message.sh and launch-revdiff.sh) to process session rollouts and launch the review interface. These scripts use standard system utilities like find, jq, and mktemp with proper quoting and path resolution.
  • [DATA_EXPOSURE]: Accesses Codex session logs located in ~/.codex/sessions to extract the last assistant message. This access is restricted to the user's home directory and is necessary for the skill's core purpose of reviewing previous outputs.
  • [DATA_EXFILTRATION]: No network operations or external data transmissions were detected. All processing of session data and annotations occurs locally on the machine.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 17, 2026, 10:54 AM
Security Audit — agent-trust-hub — revdiff-plan