doc-sync-tool

Pass

Audited by Gen Agent Trust Hub on Apr 12, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes helper shell scripts (e.g., run-sync.sh, test.sh) and Node.js child_process.execSync to perform routine file system operations such as searching with find, moving files with mv, and managing test directories. These commands use static parameters and do not process untrusted external input.
  • [SAFE]: The tool's primary logic is restricted to reading and writing specific configuration files within the project directory. It does not perform network operations (exfiltration) and contains logic to exclude sensitive or system-critical directories like .git and node_modules from its scanning process. No hardcoded credentials or obfuscated patterns were identified.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 12, 2026, 02:59 AM