skills-smart-manager
Pass
Audited by Gen Agent Trust Hub on Jul 14, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The
scripts/analyze_context.pyscript usesos.system()to check for the presence of CLI tools likegh,docker, andpython3during a health check. Whileos.system()is flagged for execution, it is used here with hardcoded strings (which gh > /dev/null 2>&1) to verify installation, which is a common and safe practice in this context. - [COMMAND_EXECUTION]: The skill provides instructions to execute local Python scripts and shell commands (
cp,ln,chmod) for installation and management. These operations are restricted to the local environment and are consistent with the skill's stated purpose of managing other local skills. - [SAFE]: The
garbage_collectfunction inscripts/analyze_context.pyperforms file deletions (path.unlink()), but it is limited to specific, non-sensitive temporary file patterns (*.skill-temp.*,.claude-export-*.pdf,diagnose-*.log) within the project root.
Audit Metadata