seed-token-analysis
Pass
Audited by Gen Agent Trust Hub on Sep 1, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements secure file handling by using
realpathand boundary checks (isPathInside) to ensure all file access is confined to the specific project repository, effectively preventing directory traversal vulnerabilities. - [SAFE]: YAML parsing logic is configured with security-hardened settings, including
maxAliasCount: 0and thefailsafeschema, which protects the host system from YAML-based Denial-of-Service (DoS) attacks such as recursive alias expansion. - [SAFE]: The analysis scripts are designed for local operation and do not contain any network-facing code, credentials, or exfiltration logic.
- [SAFE]: User-supplied token identifiers are subjected to strict normalization and validation regex before processing, which prevents unexpected script behavior or injection attempts via the command-line interface.
Audit Metadata