pma
Pass
Audited by Gen Agent Trust Hub on Oct 18, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [SAFE]: No malicious patterns, obfuscation, or unauthorized data exfiltration attempts were detected in the skill instructions or associated scripts.
- [COMMAND_EXECUTION]: The skill includes a utility script
scripts/task-state.shfor managing task status transitions. The script implements safe shell scripting practices, including input validation via regular expressions for theownerfield, atomic file operations usingmktempandmv, and concurrency control viaflockto prevent race conditions during multi-agent coordination. - [EXTERNAL_DOWNLOADS]: The documentation references official, trusted sources for project configuration, such as fetching boilerplate
.gitignorefiles from GitHub's official repository. It also defines strict policies for dependency management, requiring verification against official language registries (npm, PyPI, crates.io, etc.). - [SAFE]: Process management instructions for
tmuxand local routing vianslfollow standard developer practices and do not request excessive privileges or perform suspicious background operations.
Audit Metadata