long-running-harness
Pass
Audited by Gen Agent Trust Hub on May 4, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements a legitimate workflow for managing complex, multi-session development projects, citing established research from Anthropic and using standard project structures.
- [EXTERNAL_DOWNLOADS]: The included initialization scripts for Node.js and Ruby on Rails perform standard dependency management tasks using
npm,yarn, andbundle. These operations are transparent, use official package registries, and are essential for the skill's primary function of setting up development environments. - [COMMAND_EXECUTION]: The skill utilizes the
Bashtool to run setup scripts and verification tests. The provided templates use standard commands for environment preparation, database migrations, and smoke testing, with no evidence of privilege escalation or malicious intent. - [DATA_EXFILTRATION]: The skill follows security best practices for secret management by instructing the agent to create local environment files (
.env) from templates rather than hardcoding sensitive credentials.
Audit Metadata