skills/affaan-m/ecc/security-scan/Gen Agent Trust Hub

security-scan

Pass

Audited by Gen Agent Trust Hub on Jun 16, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONREMOTE_CODE_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill recommends installing the ecc-agentshield package from the npm registry and references its public source code repository on GitHub. These resources are provided by the skill's author.
  • [COMMAND_EXECUTION]: The skill provides instructions to execute several shell commands. These include scanning the local directory for security issues, automatically fixing vulnerabilities (--fix), and initializing new configuration files (init). These operations are consistent with the skill's stated purpose of managing project security.
  • [REMOTE_CODE_EXECUTION]: Several commands utilize npx to download and execute the ecc-agentshield tool directly from the npm registry. This is a standard method for running Node.js CLI tools without permanent installation.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 16, 2026, 02:47 PM
Security Audit — agent-trust-hub — security-scan