technical-debt-auditor
Pass
Audited by Gen Agent Trust Hub on May 15, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the 'Bash' tool to perform repository scanning, manage Docker builds, and run test suites. Security is maintained through mandatory sandboxing, container timeouts, and the 'no-new-privileges' security option.
- [EXTERNAL_DOWNLOADS]: The scanner agent utilizes standard auditing tools (pip-audit, npm audit, cargo audit) to check for dependency vulnerabilities against public databases. This is a legitimate function for a security auditing skill.
- [DATA_EXFILTRATION]: Although the skill searches for secrets and sensitive configuration files, it is designed to output this information into a local 'DEBT.md' file. The skill specifically disables networking in the Docker environment during runtime verification to prevent unauthorized data transfer.
- [SAFE]: The skill demonstrates an 'assume-malicious' posture toward the code it audits by requiring Docker for execution and explicitly warning the user if secrets are detected in the scanned repository.
Audit Metadata