quality-gates

Pass

Audited by Gen Agent Trust Hub on Sep 16, 2026

Risk Level: SAFEDYNAMIC_CONTEXT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [DYNAMIC_CONTEXT_INJECTION]: The skill uses dynamic context injection in scripts/assess-complexity.md to automatically gather project metrics when the assessment is performed.
  • The following commands are executed to provide context: !pwd, !basename $(git rev-parse --show-toplevel 2>/dev/null) || echo "Unknown", !find . -type f ... | wc -l, and !git log ... | wc -l.
  • These commands are used solely to populate metadata about the project's size, complexity (LOC), and recent activity (git churn) to inform the quality gate process.
  • [COMMAND_EXECUTION]: The skill includes utilities for analyzing local project structure and complexity.
  • scripts/analyze-codebase.sh: A shell script that uses standard utilities like find, awk, and git to generate a complexity score based on file counts and lines of code.
  • scripts/count-dependencies.py: A Python script designed to parse project manifest files such as package.json, pyproject.toml, and requirements.txt to identify and categorize project dependencies.
  • [EXTERNAL_DOWNLOADS]: The skill provides informational links to official documentation for established technology frameworks and best practices.
  • Links to resources from Cloudflare, Netlify, Vercel, and other well-known services are provided to guide users on quality standards and implementation patterns.
  • These references target well-known organizations and do not involve the execution of remote scripts or the download of untrusted binaries.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 16, 2026, 05:22 AM
Security Audit — agent-trust-hub — quality-gates