meticulous-iterative-dev
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFE
Full Analysis
- [CREDENTIALS_UNSAFE]: The skill mentions the use of
METICULOUS_API_TOKENand the configuration file~/.meticulous/config.jsonfor authentication. These are documented as standard methods for authenticating with the Meticulous platform and are not used in an unsafe manner. - [COMMAND_EXECUTION]: The skill instructs the user to run various
meticulousCLI commands (e.g.,meticulous local relevant-sessions,meticulous debug replay) and standardgitcommands (git add,git commit). These are part of the intended development workflow for the tool. - [INDIRECT_PROMPT_INJECTION]: The skill instructions involve processing session IDs and commit SHAs derived from the user's local development environment. While this represents a data ingestion surface, it is limited to specific CLI arguments for a developer tool and does not present a high risk of malicious injection in this context.
Audit Metadata