ljg-push
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATIONDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill automates skill management tasks by executing several system utilities including
gitfor repository management,rsyncfor file synchronization between local paths, andsed,awk, andperlfor extensive text transformation and formatting. - [EXTERNAL_DOWNLOADS]: The script is configured to clone the
lijigang/ljg-skillsrepository from GitHub if the local working directory is not found, ensuring the environment is ready for synchronization. - [DATA_EXFILTRATION]: As part of its core functionality, the skill pushes local files from
~/.agents/skills/to a hardcoded GitHub repository. This behavior matches the skill's primary purpose of syncing and backing up local development assets. - [DYNAMIC_EXECUTION]: The skill uses the
bunruntime to execute a local TypeScript utility (Tools/MdizeEmbeddedOrg.ts) which performs sophisticated document conversions from Org-mode to Markdown during the sync process.
Audit Metadata