todo-scan

Pass

Audited by Gen Agent Trust Hub on Jun 25, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses git and gh (GitHub CLI) commands to inspect the local repository environment.
  • It executes git grep to find annotations like TODO, FIXME, HACK, and XXX within the source code.
  • It executes git log and git status to identify recent activity and repository state.
  • It executes gh issue list, gh pr list, and gh run list to fetch issue, pull request, and CI status from GitHub if the tool is available.
  • These operations are limited to read-only metadata retrieval within the current repository context.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 25, 2026, 06:00 PM
Security Audit — agent-trust-hub — todo-scan