skills/ellmos-ai/skills/tech-detect/Gen Agent Trust Hub

tech-detect

Pass

Audited by Gen Agent Trust Hub on Nov 13, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The scripts/techshot.py script executes local system binaries such as dpkg-query, rpm, brew, and sysctl to gather software versions and hardware specifications. These commands are executed with static argument lists or strictly controlled parameters, minimizing command injection risks.
  • [COMMAND_EXECUTION]: The script probes Python interpreters using the -I -S --version flags to safely extract version information from local paths without executing arbitrary script content.
  • [DATA_EXPOSURE]: The tool accesses system-level metadata, including CPU models, RAM capacity, and installed package lists from the Windows Registry and Linux procfs (/proc/meminfo, /proc/cpuinfo). The skill documentation and implementation explicitly exclude highly sensitive data like MAC addresses, hardware serial numbers, and full environment PATH strings to prevent unnecessary data exposure.
  • [EXTERNAL_DOWNLOADS]: No external downloads or network operations are performed. The tool is designed for offline execution, relying solely on local system tools and user-provided inventory seed files.
  • [SAFE]: The skill uses standard Windows API calls (e.g., GlobalMemoryStatusEx via ctypes) and cross-platform libraries to perform its primary function of infrastructure auditing. It follows the principle of least privilege by performing read-only observations.
Audit Metadata
Risk Level
SAFE
Analyzed
Nov 13, 2026, 05:40 AM