archivist
Pass
Audited by Gen Agent Trust Hub on Jun 9, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is focused on repository documentation and maintenance. It includes Node.js and Bash scripts designed to automate the creation of change records and verify documentation compliance.
- [COMMAND_EXECUTION]: The provided scripts (
archive-change.mjs,check-change-record.mjs) execute standard Git commands such asgit status,git diff, andgit log. These operations are used locally to gather metadata about code changes to populate documentation templates. The execution method (spawnSync) is used safely with hardcoded arguments. - [EXTERNAL_DOWNLOADS]: The README documents installation via the official vendor repository at
https://github.com/wundercorp/archivist-skill. As a vendor-owned resource, this is considered a standard installation procedure. - [DATA_EXPOSURE]: The skill explicitly instructs against recording sensitive information such as secrets, credentials, or private customer data in the documentation records, promoting secure development practices.
Audit Metadata