loom-skill-enhancement
Pass
Audited by Gen Agent Trust Hub on Jul 1, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches Loom Skill Orchestrator runtime packages (Techne.Loom.SkillOrchestrator, Techne.Loom.Common, Techne.Loom.Abstractions) from NuGet.org, a well-known package registry. These downloads are used to establish a localized runtime for skill execution.
- [COMMAND_EXECUTION]: Executes the dotnet so.dll binary via dotnet exec to perform deterministic workflow operations including compilation, running, and status inspections. These operations are governed by checked-in templates and guides.
- [SAFE]: Implements a 'checked_in_asset_boundary_rule' that enforces an explicit asset root for file operations, preventing directory traversal or access to files outside the target skill directory.
- [SAFE]: Uses specialized subagents (e.g., loom-skill-enhancement-workflow-designer.agent.md) for delegated analysis and design tasks, ensuring work is performed through defined, reviewable contracts.
Audit Metadata