trivy
Pass
Audited by Gen Agent Trust Hub on Oct 24, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is purely informational and provides documentation on using the
trivysecurity scanner as part of a DevOps workflow. No malicious patterns such as prompt injection, data exfiltration, or obfuscation were found. - [SAFE]: The command examples provided use standard
trivyusage patterns and reference placeholder images and repositories (e.g.,ghcr.io/example/api,github.com/example/api). - [SAFE]: The skill explicitly promotes security best practices, such as pinning versions, caching vulnerability databases, and rotating leaked secrets rather than simply suppressing them.
Audit Metadata