hooks-eval
Pass
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides a legitimate framework for evaluating the security, performance, and compliance of hooks within an agent ecosystem. It advocates for security best practices like vulnerability scanning and injection prevention.
- [COMMAND_EXECUTION]: The instructions mention running a local Python validator (
hook_validator.py) and various CLI diagnostic commands. These are standard developer tools for the intended purpose of code auditing and do not exhibit malicious intent. - [DATA_EXPOSURE]: The skill contains relative paths (e.g.,
../../skills-eval/modules/evaluation-criteria.md) to external documentation. These references appear to be part of a structured documentation system for a larger plugin suite and do not represent a malicious attempt at path traversal or unauthorized data exposure.
Audit Metadata