ops-projects

Pass

Audited by Gen Agent Trust Hub on Apr 29, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes a local bash script, ops-gsd-registry-sync.sh, to update the project index when the user provides the --sync or --refresh flags. This script is located within the plugin's own root directory.
  • [SAFE]: The skill accesses local project data in ~/Projects and ~/gsd-workspaces, specifically targeting metadata files within .planning/ subdirectories. This is consistent with its stated purpose of project tracking.
  • [SAFE]: Configuration and health data are read from established local paths under OPS_DATA_DIR or the standard Claude plugin data directory. No sensitive files (e.g., SSH keys, AWS credentials) are accessed.
  • [SAFE]: No remote code execution, network exfiltration, or prompt injection patterns were found in the instructions or metadata.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 29, 2026, 06:48 AM