wk-scope-guard
Pass
Audited by Gen Agent Trust Hub on Aug 24, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [SAFE]: The skill is a defensive tool designed to restrict agent behavior to the current project scope. It implements a PreToolUse hook that provides a mechanical backstop against accidental or intentional access to the filesystem root or other out-of-repo locations.
- [COMMAND_EXECUTION]: The hook script (hooks/scope-guard.sh) utilizes python3 and git to process tool payloads and evaluate file paths. These commands are used locally to identify search patterns and normalize directory paths against the repository root.
Audit Metadata