pbip
Pass
Audited by Gen Agent Trust Hub on May 21, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The
scripts/validate_pbip.pyutility uses thesubprocessmodule to delegate deep report validation to thepbircommand-line tool. The execution is handled securely using a list of arguments without shell interpolation, mitigating command injection risks. - [EXTERNAL_DOWNLOADS]: The documentation suggests the installation of the
pbir-clipackage via standard package managers (piporuv). These references target legitimate ecosystem tools required for the skill's functionality. - [SAFE]: The skill demonstrates security awareness by including explicit Zip Slip protection in its PBIX extraction code examples, ensuring file operations remain within intended directory boundaries.
- [SAFE]: File access and modification operations, such as scaffolding a
.gitignorefile, are scoped to the local project environment and require explicit user flags in the validation script.
Audit Metadata