pbip

Pass

Audited by Gen Agent Trust Hub on May 21, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The scripts/validate_pbip.py utility uses the subprocess module to delegate deep report validation to the pbir command-line tool. The execution is handled securely using a list of arguments without shell interpolation, mitigating command injection risks.
  • [EXTERNAL_DOWNLOADS]: The documentation suggests the installation of the pbir-cli package via standard package managers (pip or uv). These references target legitimate ecosystem tools required for the skill's functionality.
  • [SAFE]: The skill demonstrates security awareness by including explicit Zip Slip protection in its PBIX extraction code examples, ensuring file operations remain within intended directory boundaries.
  • [SAFE]: File access and modification operations, such as scaffolding a .gitignore file, are scoped to the local project environment and require explicit user flags in the validation script.
Audit Metadata
Risk Level
SAFE
Analyzed
May 21, 2026, 09:56 AM
Security Audit — agent-trust-hub — pbip