ops-projects
Pass
Audited by Gen Agent Trust Hub on Apr 29, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes a local bash script,
ops-gsd-registry-sync.sh, to update the project index when the user provides the--syncor--refreshflags. This script is located within the plugin's own root directory. - [SAFE]: The skill accesses local project data in
~/Projectsand~/gsd-workspaces, specifically targeting metadata files within.planning/subdirectories. This is consistent with its stated purpose of project tracking. - [SAFE]: Configuration and health data are read from established local paths under
OPS_DATA_DIRor the standard Claude plugin data directory. No sensitive files (e.g., SSH keys, AWS credentials) are accessed. - [SAFE]: No remote code execution, network exfiltration, or prompt injection patterns were found in the instructions or metadata.
Audit Metadata