skills/vm0-ai/vm0/code-quality/Gen Agent Trust Hub

code-quality

Pass

Audited by Gen Agent Trust Hub on Jul 30, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses git, gh (GitHub CLI), and pnpm to perform its operations. These tools are used for commit log analysis, PR data retrieval, and running project linting and type-checking tasks during code cleanup.
  • [DATA_EXPOSURE]: The skill accesses source code, commit history, and internal documentation (docs/bad-smell.md, docs/testing.md, etc.) to perform its review. This access is limited to the repository context.
  • [SAFE]: The skill incorporates several security-positive checks, such as flagging hardcoded URLs, any type usage, and linting suppressions. The automated 'cleanup' operation is constrained by specific pattern-matching rules and safety validation logic, ensuring that refactoring is performed via branches and PRs rather than direct modification of the codebase without oversight.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 30, 2026, 10:19 PM
Security Audit — agent-trust-hub — code-quality