techdebt-scan
Pass
Audited by Gen Agent Trust Hub on Mar 10, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill's primary function is code auditing through local file system analysis. It uses standard tools like
ripgrep(rg),find, andwcto search for technical debt indicators. - [COMMAND_EXECUTION]: The bash scripts provided (
scripts/find-todos.shandscripts/scan-large-files.sh) perform read-only operations on the project source code. They utilize safe shell practices (set -eo pipefail) and do not attempt to gain elevated privileges or execute arbitrary code from external sources. - [DATA_EXFILTRATION]: There are no network-capable commands or functions (such as
curlorfetch) present in the skill files. All analyzed data remains within the local environment. - [PROMPT_INJECTION]: The
SKILL.mdfile contains standard instructional content for a code quality workflow and does not contain any patterns associated with role-play bypasses or safety guideline overrides.
Audit Metadata