write-agent-hooks
Pass
Audited by Gen Agent Trust Hub on Oct 6, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides utility scripts (
merge_hooks.py,check_hook_config.py) for managing agent hook configurations in a structured and safe manner. - [SAFE]: A dedicated defensive script (
scripts/guard_shell.py) is provided to block hazardous shell commands such as recursive deletions and force pushes. - [REMOTE_CODE_EXECUTION]: Automated tools flagged a potentially dangerous command (
curl ... | sh) inscripts/test_guard_shell.py. This is a false positive, as the command is a test payload used to verify that theguard_shell.pyscript correctly identifies and blocks malicious input. - [COMMAND_EXECUTION]: The use of
subprocess.runin test scripts is limited to executing the skill's own utility scripts within a controlled testing environment.
Audit Metadata