worklog
Pass
Audited by Gen Agent Trust Hub on Mar 9, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill instructions direct the agent to use the standard system command
date +%Y-%m-%dto ensure accuracy when recording entry dates. - [DATA_EXPOSURE]: The manager script reads client data from
~/.claude/skills/invoice/clients.jsonand writes worklog data toworklog.jsonwithin the skill directory. This behavior is documented as a primary feature for cross-skill integration and does not target sensitive system files or credentials.
Audit Metadata