NYC

config-skills

Pass

Audited by Gen Agent Trust Hub on Feb 17, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE] (SAFE): No malicious patterns, obfuscation, or injection attempts were detected. The skill provides best practices for local configuration management.
  • [COMMAND_EXECUTION] (SAFE): The documentation mentions CLI commands for linting and testing (e.g., uv run, nx run). However, the skill's defined allowed-tools (Read, Grep, Glob) are restricted to read-only operations, preventing the agent from executing these or any other shell commands.
  • [EXTERNAL_DOWNLOADS] (SAFE): The tech stack references standard, reputable libraries such as pydantic, ruamel.yaml, and jsonschema. No patterns for downloading and executing untrusted remote scripts were found.
  • [DATA_EXFILTRATION] (SAFE): The skill does not define any network-capable tools or demonstrate patterns for sending data to external domains.
Audit Metadata
Risk Level
SAFE
Analyzed
Feb 17, 2026, 06:06 PM