skills/lijigang/ljg-skills/ljg-push/Gen Agent Trust Hub

ljg-push

Pass

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATIONDYNAMIC_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill automates skill management tasks by executing several system utilities including git for repository management, rsync for file synchronization between local paths, and sed, awk, and perl for extensive text transformation and formatting.
  • [EXTERNAL_DOWNLOADS]: The script is configured to clone the lijigang/ljg-skills repository from GitHub if the local working directory is not found, ensuring the environment is ready for synchronization.
  • [DATA_EXFILTRATION]: As part of its core functionality, the skill pushes local files from ~/.agents/skills/ to a hardcoded GitHub repository. This behavior matches the skill's primary purpose of syncing and backing up local development assets.
  • [DYNAMIC_EXECUTION]: The skill uses the bun runtime to execute a local TypeScript utility (Tools/MdizeEmbeddedOrg.ts) which performs sophisticated document conversions from Org-mode to Markdown during the sync process.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 15, 2026, 02:40 AM
Security Audit — agent-trust-hub — ljg-push