octocode-research
Pass
Audited by Gen Agent Trust Hub on May 1, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill requires starting a local HTTP server using
npm startornode scripts/server-init.js. This is a documented and necessary part of the skill's infrastructure to provide persistent research capabilities and circuit breaking logic. - [EXTERNAL_DOWNLOADS]: The skill facilitates data retrieval from trusted and well-known services including GitHub, NPM, and PyPI registries to analyze repository structures and code contents. These operations are core to the skill's stated purpose of providing comprehensive code research.
- [SAFE]: Robust security measures are implemented throughout the codebase, including a
safePathZod refinement that blocks directory traversal attempts and a sanitization utility in the logger that automatically redacts sensitive keys such as 'token', 'secret', and 'api_key' from output logs.
Audit Metadata