octocode-research

Pass

Audited by Gen Agent Trust Hub on May 1, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill requires starting a local HTTP server using npm start or node scripts/server-init.js. This is a documented and necessary part of the skill's infrastructure to provide persistent research capabilities and circuit breaking logic.
  • [EXTERNAL_DOWNLOADS]: The skill facilitates data retrieval from trusted and well-known services including GitHub, NPM, and PyPI registries to analyze repository structures and code contents. These operations are core to the skill's stated purpose of providing comprehensive code research.
  • [SAFE]: Robust security measures are implemented throughout the codebase, including a safePath Zod refinement that blocks directory traversal attempts and a sanitization utility in the logger that automatically redacts sensitive keys such as 'token', 'secret', and 'api_key' from output logs.
Audit Metadata
Risk Level
SAFE
Analyzed
May 1, 2026, 10:47 PM