do
Warn
Audited by Gen Agent Trust Hub on Mar 6, 2026
Risk Level: MEDIUMCOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The
verify-loop.pyscript retrieves command strings from atask.jsonfile and executes them usingsubprocess.run(shell=True). This mechanism allows the execution of arbitrary shell commands on the host if the configuration file is modified. - [COMMAND_EXECUTION]: The
install.pyscript modifies the user's global~/.claude/settings.jsonfile to register aStophook. This hook ensures thatstop-hook.pyis executed at the end of every agent session to manage the skill's state. - [COMMAND_EXECUTION]: The
task.pyscript executes git commands, specificallygit worktree add, via subprocess calls to manage isolated development environments.
Audit Metadata