session-commit
Pass
Audited by Gen Agent Trust Hub on Apr 29, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: Executes a local validation script (
scripts/preflight.sh) to verify the presence of required documentation files. - The script is bundled with the skill and performs only filesystem checks and symlink creation within the project directory.
- [EXTERNAL_DOWNLOADS]: Mentions installation via standard package managers (NPM) and official GitHub repositories, which are expected distribution methods for the author's tools.
- [DATA_EXFILTRATION]: No network operations or access to sensitive global configuration files (e.g., AWS or SSH credentials) were found. The skill operates exclusively on project-local files.
- [PROMPT_INJECTION]: The skill processes session data to generate summaries but mitigates potential instruction injection by requiring explicit user approval before any changes are written to the filesystem.
Audit Metadata