tech-detect
Pass
Audited by Gen Agent Trust Hub on Nov 13, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The
scripts/techshot.pyscript executes local system binaries such asdpkg-query,rpm,brew, andsysctlto gather software versions and hardware specifications. These commands are executed with static argument lists or strictly controlled parameters, minimizing command injection risks. - [COMMAND_EXECUTION]: The script probes Python interpreters using the
-I -S --versionflags to safely extract version information from local paths without executing arbitrary script content. - [DATA_EXPOSURE]: The tool accesses system-level metadata, including CPU models, RAM capacity, and installed package lists from the Windows Registry and Linux procfs (
/proc/meminfo,/proc/cpuinfo). The skill documentation and implementation explicitly exclude highly sensitive data like MAC addresses, hardware serial numbers, and full environment PATH strings to prevent unnecessary data exposure. - [EXTERNAL_DOWNLOADS]: No external downloads or network operations are performed. The tool is designed for offline execution, relying solely on local system tools and user-provided inventory seed files.
- [SAFE]: The skill uses standard Windows API calls (e.g.,
GlobalMemoryStatusExviactypes) and cross-platform libraries to perform its primary function of infrastructure auditing. It follows the principle of least privilege by performing read-only observations.
Audit Metadata