skills/ehmo/slopkit/slopbeth/Gen Agent Trust Hub

slopbeth

Pass

Audited by Gen Agent Trust Hub on Jul 24, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill is primarily focused on text analysis and quality benchmarking. All provided scripts (Python and PowerShell) perform legitimate operations such as regex-based pattern matching, word counting, and statistical analysis of text density.
  • [COMMAND_EXECUTION]: Development and testing scripts like install_smoke.py and Test-Install.ps1 utilize subprocess or PowerShell execution to verify the skill's installation process. These operations are scoped to the project's own files and temporary directories, which is standard behavior for smoke tests.
  • [DATA_INGESTION]: The skill's primary function is to ingest and analyze text artifacts. This ingestion is performed using standard file I/O operations and the data is treated as plain text for linguistic metrics, presenting no risk of indirect code execution.
  • [CREDENTIALS_UNSAFE]: The skill includes defensive tools such as ci_secret_scan.py and Test-Secret.ps1 which contain regular expressions designed to detect accidental secret exposure in the repository. The skill itself does not contain any hardcoded credentials.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 24, 2026, 08:46 PM
Security Audit — agent-trust-hub — slopbeth