skills/yysun/rpd/project-manager/Gen Agent Trust Hub

project-manager

Pass

Audited by Gen Agent Trust Hub on Aug 9, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill implements a robust security model for file system access, using realpath to resolve project directories and explicitly rejecting symlinks or any paths that attempt to escape the selected project root.
  • [SAFE]: Data integrity is maintained through the use of isolated work areas (marker-bound sibling directories) for all mutations, ensuring atomic updates and providing reliable rollback mechanisms in case of failure.
  • [SAFE]: The Project Manager Studio operates on the local loopback interface and requires a generated access token for authentication, preventing unauthorized external access to the project visualization tools.
  • [SAFE]: The skill relies entirely on local, deterministic Node.js scripts for its operations and does not perform any remote code downloads or external network requests.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 9, 2026, 03:08 PM
Security Audit — agent-trust-hub — project-manager