asset-source

Pass

Audited by Gen Agent Trust Hub on Jun 20, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill implements an asset search functionality using a static, hardcoded catalog in scripts/search_assets.py. This mock data approach prevents exposure to untrusted external databases.
  • [SAFE]: The script utilizes vendor-provided libraries (dcc_mcp_core), which are consistent with the skill's author (dcc-mcp). These dependencies are used for data modeling and standard skill lifecycle management.
  • [SAFE]: No network operations, sensitive file system access (such as reading credentials or SSH keys), or dynamic code execution patterns (like eval or exec) were detected.
  • [SAFE]: The tool configuration in tools.yaml correctly identifies the search_assets tool as read_only, minimizing the potential for side effects.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 20, 2026, 07:26 PM