skill-link-check

Pass

Audited by Gen Agent Trust Hub on Aug 2, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill serves as a local auditing tool for verifying project structures. It does not perform any automated write operations or modifications to the file system.
  • [COMMAND_EXECUTION]: The script generates suggested shell commands for the user to manually resolve directory inconsistencies. It correctly uses shlex.quote to escape file paths, which mitigates potential command injection risks if directory names were to contain malicious shell metacharacters.
  • [EXTERNAL_DOWNLOADS]: The documentation references npx skills for installation and updates. These commands target the official platform and the author's repository, which is standard behavior for skill management in this ecosystem.
  • [SAFE]: The subprocess.run call identified by static analysis in the test suite is used to execute the local Python script within a controlled unit testing environment. It does not use shell=True and targets a known local file, representing a safe and standard testing practice.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 2, 2026, 04:52 AM
Security Audit — agent-trust-hub — skill-link-check