auditing-compliance

Pass

Audited by Gen Agent Trust Hub on Mar 13, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill operates as a static analysis tool, using system utilities like rg and find to audit code for compliance requirements. No malicious patterns, obfuscation, or unauthorized network activity were found.
  • [COMMAND_EXECUTION]: The skill instructs the agent to use rg (ripgrep) and find to locate specific security signals, such as authentication libraries, encryption algorithms, and potential PII in database schemas. These commands are used appropriately for auditing purposes.
  • [PROMPT_INJECTION]: The skill processes external codebase data, which is an inherent part of its auditing function. Although this technically presents a surface for indirect prompt injection, the skill is focused on generating reports and does not execute any ingested data, maintaining a safe operational profile.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 13, 2026, 09:44 AM