commit-history

Pass

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill follows secure coding practices by explicitly recommending the use of URLSearchParams or encodeURIComponent to prevent query string corruption or parameter injection during REST API calls. This mitigates risks associated with handling potentially untrusted input in URL parameters.
  • [SAFE]: Data ingestion is limited to git commit metadata (messages, SHAs, timestamps) retrieved via the memory_commits tool. The skill's primary function is to render this information in a list format, and it lacks dangerous capabilities such as file system writes, arbitrary shell execution, or unauthorized external network requests.
  • [SAFE]: No obfuscation, persistence mechanisms, or privilege escalation attempts were detected. The skill's behavior matches its stated purpose of managing agent-linked commit history.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 15, 2026, 01:42 AM
Security Audit — agent-trust-hub — commit-history