dev-context-code-graph
Pass
Audited by Gen Agent Trust Hub on May 20, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements a deterministic parsing pipeline using Python's standard
astmodule for Python files and regular expressions for other languages. This static analysis approach safely extracts codebase structure without executing the source files being analyzed. - [SAFE]: The file operations are limited to reading source code within a user-specified repository path and writing structured artifacts (JSON, Markdown, HTML, and Mermaid diagrams) to local directories. No access to sensitive system paths, credentials, or environment variables was detected.
- [SAFE]: The scripts depend exclusively on the Python Standard Library. While
scripts/test_code_graph_regressions.pyuses dynamic module loading for regression testing, it is restricted to the skill's own internal scripts and does not involve remote code execution or untrusted sources. - [SAFE]: There are no network operations or external downloads performed during runtime. Referenced external URLs in documentation and metadata point to well-known technology sites and official repositories for informational purposes.
Audit Metadata