deep-dive-analysis
Pass
Audited by Gen Agent Trust Hub on Apr 20, 2026
Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes external command-line utilities including ripgrep (rg), grep, ruff, and black to facilitate code searching and automated formatting.- [COMMAND_EXECUTION]: Command-line arguments are sanitized; scripts/usage_finder.py uses a restrictive regular expression to validate symbols, while scripts/doc_review.py implements validation to prevent path traversal attacks.- [DATA_EXFILTRATION]: A mandatory Forbidden Files policy is defined in the skill instructions to prevent the AI agent from accessing or leaking sensitive project data such as .env files, private keys, and credentials.- [SAFE]: The skill's internal state management and documentation updates utilize local file I/O with safety features like file locking in scripts/progress_tracker.py.- [SAFE]: No remote code execution or unauthorized network communication patterns were identified in the analyzed scripts or instructions.
Audit Metadata