batfish-config-analysis

Pass

Audited by Gen Agent Trust Hub on Jul 30, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill is explicitly defined as read-only, ensuring that network configurations are analyzed without the risk of unauthorized modification to production devices.\n- [COMMAND_EXECUTION]: The skill executes a local Python script (mcp-servers/batfish-mcp/batfish_mcp_server.py) to run the MCP server, which is the intended and standard mechanism for this skill's functionality.\n- [EXTERNAL_DOWNLOADS]: Declares dependencies on reputable and well-known Python packages, including pybatfish, mcp[cli], and python-dotenv. These are standard tools in the network automation and MCP ecosystems.\n- [DATA_EXPOSURE]: Uses environment variables (BATFISH_HOST, BATFISH_PORT, BATFISH_NETWORK) to manage connection details to the Batfish service, which is a secure and standard practice for avoiding hardcoded configuration.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 30, 2026, 04:29 PM
Security Audit — agent-trust-hub — batfish-config-analysis