ra-qm-skills
Pass
Audited by Gen Agent Trust Hub on May 2, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security threats or malicious patterns were identified across the 81 files in the skill collection.
- [COMMAND_EXECUTION]: The skill contains 17 Python automation scripts (e.g.,
gdpr_compliance_checker.py,risk_matrix_calculator.py) designed for command-line use. These scripts are strictly limited to the Python standard library and perform deterministic analysis of local project files and metadata without utilizing network access or dynamic code evaluation. - [EXTERNAL_DOWNLOADS]: Documentation in the
README.mdandplugin.jsonprovides installation commands vianpxpointing to the author's official GitHub repository (alirezarezvani/claude-skills). These references are consistent with the provided metadata and represent standard distribution practices for the platform. - [PROMPT_INJECTION]: While several tools (such as the GDPR and HIPAA assessment scripts) ingest arbitrary content from local project directories to generate reports, they do not echo raw untrusted content into the output context. Instead, they produce derived metadata and summary findings based on hardcoded logic, effectively neutralizing the risk of indirect prompt injection from scanned files.
Audit Metadata