spring-refresh

Pass

Audited by Gen Agent Trust Hub on Apr 26, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The provided Python script scripts/scan_skill_freshness.py uses subprocess.run to execute git commands (e.g., git log, git rev-parse) to determine file modification dates and locate the project root. This is a core part of the skill's functionality and does not involve unsanitized user input.
  • [EXTERNAL_DOWNLOADS]: The skill documentation references research documents and optional plugin dependencies hosted on the author's GitHub repository (joaquimscosta/arkhe-claude-plugins). These resources are documented neutrally as part of the skill's operational context.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 26, 2026, 10:55 AM