auditing-compliance
Pass
Audited by Gen Agent Trust Hub on Mar 13, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill operates as a static analysis tool, using system utilities like
rgandfindto audit code for compliance requirements. No malicious patterns, obfuscation, or unauthorized network activity were found. - [COMMAND_EXECUTION]: The skill instructs the agent to use
rg(ripgrep) andfindto locate specific security signals, such as authentication libraries, encryption algorithms, and potential PII in database schemas. These commands are used appropriately for auditing purposes. - [PROMPT_INJECTION]: The skill processes external codebase data, which is an inherent part of its auditing function. Although this technically presents a surface for indirect prompt injection, the skill is focused on generating reports and does not execute any ingested data, maintaining a safe operational profile.
Audit Metadata