skill-link-check
Pass
Audited by Gen Agent Trust Hub on Aug 2, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a local auditing tool for verifying project structures. It does not perform any automated write operations or modifications to the file system.
- [COMMAND_EXECUTION]: The script generates suggested shell commands for the user to manually resolve directory inconsistencies. It correctly uses
shlex.quoteto escape file paths, which mitigates potential command injection risks if directory names were to contain malicious shell metacharacters. - [EXTERNAL_DOWNLOADS]: The documentation references
npx skillsfor installation and updates. These commands target the official platform and the author's repository, which is standard behavior for skill management in this ecosystem. - [SAFE]: The
subprocess.runcall identified by static analysis in the test suite is used to execute the local Python script within a controlled unit testing environment. It does not useshell=Trueand targets a known local file, representing a safe and standard testing practice.
Audit Metadata