json-yaml-converter
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements secure configuration parsing by using
yaml.safe_load()inscripts/json_yaml_converter.py. This is a critical security measure that prevents arbitrary code execution during the deserialization of YAML files. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process external data in the form of configuration files. While this presents a theoretical attack surface for indirect prompt injection if the output is later interpreted as instructions by an agent, the script itself performs safe data transformations and does not execute content as code.
- [EXTERNAL_DOWNLOADS]: The documentation references the official PyYAML repository and standard Python packages (
pyyaml,toml). These are well-known, industry-standard dependencies for configuration management and do not introduce unusual security risks.
Audit Metadata