quality-gates
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEDYNAMIC_CONTEXT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [DYNAMIC_CONTEXT_INJECTION]: The skill uses dynamic context injection in
scripts/assess-complexity.mdto automatically gather project metrics when the assessment is performed. - The following commands are executed to provide context:
!pwd,!basename $(git rev-parse --show-toplevel 2>/dev/null) || echo "Unknown",!find . -type f ... | wc -l, and!git log ... | wc -l. - These commands are used solely to populate metadata about the project's size, complexity (LOC), and recent activity (git churn) to inform the quality gate process.
- [COMMAND_EXECUTION]: The skill includes utilities for analyzing local project structure and complexity.
scripts/analyze-codebase.sh: A shell script that uses standard utilities likefind,awk, andgitto generate a complexity score based on file counts and lines of code.scripts/count-dependencies.py: A Python script designed to parse project manifest files such aspackage.json,pyproject.toml, andrequirements.txtto identify and categorize project dependencies.- [EXTERNAL_DOWNLOADS]: The skill provides informational links to official documentation for established technology frameworks and best practices.
- Links to resources from Cloudflare, Netlify, Vercel, and other well-known services are provided to guide users on quality standards and implementation patterns.
- These references target well-known organizations and do not involve the execution of remote scripts or the download of untrusted binaries.
Audit Metadata