itgc-testing Audit report.

Warnings

• The skill instructs agents to use bash for permission analysis scripts and log comparisons without read-only guardrails, so a malicious log or policy document could influence unintended commands.
• SKILL.md does not define explicit safe operating boundaries (e.g., read-only access, no production changes, confidentiality handling) or limitations/professional judgment caveats.
• The provided SKILL.md appears truncated at the output template, so later ITGC areas such as system development and IT operations do not have complete output guidance.
• Low GitHub adoption signal
• Quality score needs review
• GitHub adoption: 37 GitHub stars
• Stars/forks activity: 37 stars, 2 forks; issue activity unavailable in current metadata
• README/SKILL.md completeness: Public metadata needs stronger README/SKILL.md context

Method

This report combines public metadata, AI review output, repository freshness, install readiness, OpenAgentSkill events, quality scoring, trust checks, and the agent safety gate. It is not a full source-code security review.