anneal
Pass
Audited by Gen Agent Trust Hub on Jul 25, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill recommends installing the
hcanalysis CLI from the author's official GitHub repository (github.com/will-wright-eng/hc) using the Go package manager. This is a legitimate vendor resource and is hosted on a trusted platform. - [COMMAND_EXECUTION]: The skill executes several local commands, including
git logto analyze commit history,jqfor JSON processing, and thehctool for complexity analysis. These commands are directed at the local repository and do not involve unauthorized network activity. - [SAFE]: Analysis of the skill's instructions and scripts reveals no evidence of prompt injection, data exfiltration, obfuscation, or other malicious behaviors. All operations are consistent with the documented refactoring workflow and vendor context.
Audit Metadata