project-manager
Pass
Audited by Gen Agent Trust Hub on Aug 9, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements a robust security model for file system access, using
realpathto resolve project directories and explicitly rejecting symlinks or any paths that attempt to escape the selected project root. - [SAFE]: Data integrity is maintained through the use of isolated work areas (marker-bound sibling directories) for all mutations, ensuring atomic updates and providing reliable rollback mechanisms in case of failure.
- [SAFE]: The Project Manager Studio operates on the local loopback interface and requires a generated access token for authentication, preventing unauthorized external access to the project visualization tools.
- [SAFE]: The skill relies entirely on local, deterministic Node.js scripts for its operations and does not perform any remote code downloads or external network requests.
Audit Metadata