repo-audit
Pass
Audited by Gen Agent Trust Hub on Aug 17, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is purely analytical and explicitly instructs the agent not to modify any source code ('Analysis only, no code changes'). It follows a structured four-phase process (discovery, audit, strategy, and planning) designed for principal-engineer level architectural review.
- [SAFE]: The only file system write operation permitted is the creation of a report file in the
reports/directory to document findings. - [SAFE]: Security is addressed as a dimension of the audit, instructing the agent to look for common vulnerabilities like hardcoded secrets or unsafe deserialization, but it does not contain code to exploit these or exfiltrate them.
- [SAFE]: The skill instructs the agent to run the repository's own verification tools (lint, test, typecheck), which is standard behavior for a development-focused agent skill.
Audit Metadata