asset-source
Pass
Audited by Gen Agent Trust Hub on Jun 20, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements an asset search functionality using a static, hardcoded catalog in
scripts/search_assets.py. This mock data approach prevents exposure to untrusted external databases. - [SAFE]: The script utilizes vendor-provided libraries (
dcc_mcp_core), which are consistent with the skill's author (dcc-mcp). These dependencies are used for data modeling and standard skill lifecycle management. - [SAFE]: No network operations, sensitive file system access (such as reading credentials or SSH keys), or dynamic code execution patterns (like
evalorexec) were detected. - [SAFE]: The tool configuration in
tools.yamlcorrectly identifies thesearch_assetstool asread_only, minimizing the potential for side effects.
Audit Metadata