zip-bundling
Pass
Audited by Gen Agent Trust Hub on Mar 14, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements a 'deny-list' approach in
scripts/bundle.pyandscripts/bundle_zip.pyto prevent the accidental inclusion of sensitive files such as.envand__pycache__in generated bundles. - [SAFE]: Command execution is handled securely; the skill uses the Python
zipfilelibrary for archive creation rather than spawning shell processes (e.g.,ziportar), which mitigates risk of command injection. - [SAFE]: File path resolution in
scripts/path_resolver.pyuses heuristic landmark checks (like.gitor.agent) to define the project root, preventing unauthorized directory traversal outside of the intended workspace.
Audit Metadata