security-compliance-audit

Pass

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [SAFE]: The skill provides legitimate templates and scripts for security compliance auditing. No evidence of prompt injection, credential harvesting, or malicious obfuscation was found during the analysis.
  • [COMMAND_EXECUTION]: The script scripts/security-checklist.sh is a utility for generating a security review checklist. It uses standard bash features to write content to a file and does not include any dangerous command execution patterns.
  • [EXTERNAL_DOWNLOADS]: The reference implementation in references/nodejs-compliance-automation.md uses the axios library to perform network-based security checks, such as TLS version validation. These network operations target standard example domains and are consistent with the skill's stated purpose of auditing infrastructure.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 15, 2026, 01:55 PM