doc-sync-tool
Pass
Audited by Gen Agent Trust Hub on Apr 12, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes helper shell scripts (e.g.,
run-sync.sh,test.sh) and Node.jschild_process.execSyncto perform routine file system operations such as searching withfind, moving files withmv, and managing test directories. These commands use static parameters and do not process untrusted external input. - [SAFE]: The tool's primary logic is restricted to reading and writing specific configuration files within the project directory. It does not perform network operations (exfiltration) and contains logic to exclude sensitive or system-critical directories like
.gitandnode_modulesfrom its scanning process. No hardcoded credentials or obfuscated patterns were identified.
Audit Metadata