oss-security-analysis
Pass
Audited by Gen Agent Trust Hub on Apr 1, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides a structured framework for performing security audits on external codebases. It defines a multi-phase workflow covering pre-run safety, dependency analysis, and codebase pattern scanning.
- [COMMAND_EXECUTION]: The skill instructs the agent to use standard system commands like
grepand official ecosystem audit tools (e.g.,npm audit,pip-audit,cargo audit,govulncheck) to identify vulnerabilities. These operations are essential for the skill's primary purpose of security auditing. - [DATA_EXPOSURE]: While the skill mentions sensitive file paths (such as
~/.ssh,~/.aws, and.env), it does so strictly in the context of defining patterns for the agent to search for during an audit of third-party code. The skill does not access or exfiltrate these files from the user's own environment.
Audit Metadata