ewc-community-hub
Pass
Audited by Gen Agent Trust Hub on Nov 3, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves its stated purpose of onboarding items into the EWC Community Hub catalog. All referenced URLs belong to official domains associated with EUMETSAT, ECMWF, or the GitHub organization 'ewcloud'.
- [COMMAND_EXECUTION]: The skill provides documentation on how users can run a Docker-based validator locally. These commands are standard for the development workflow and do not involve the agent executing arbitrary code or escalating privileges.
- [INDIRECT_PROMPT_INJECTION]: While the skill ingests user-provided information to draft YAML metadata, it includes strict instructions against inventing values and requires manual verification. The attack surface is minimal as the agent does not execute the generated metadata itself.
- [EXTERNAL_DOWNLOADS]: References to the catalog schema and official documentation on GitHub and Confluence are consistent with the vendor context (EUMETSAT/EWC). All external sources are well-known and trusted within the project scope.
Audit Metadata