audit-tenant-settings

Pass

Audited by Gen Agent Trust Hub on May 21, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The script scripts/audit-tenant-settings.py executes the fab CLI via subprocess.run to retrieve live tenant settings from the administrative API. This is the primary function of the skill and is implemented using safe practices (list-based arguments without shell=True).
  • [COMMAND_EXECUTION]: The script scripts/generate_audit_pdf.py executes the fab CLI via subprocess.run to enumerate delegated overrides across capacity, domain, and workspace scopes for inclusion in the PDF report.
  • [SAFE]: The script scripts/generate_audit_pdf.py uses the standard library importlib.util module to dynamically load the bundled audit-tenant-settings.py script at runtime. This allows for code reuse of data merge and normalization logic between the auditing and reporting scripts.
Audit Metadata
Risk Level
SAFE
Analyzed
May 21, 2026, 09:57 AM
Security Audit — agent-trust-hub — audit-tenant-settings