security-ownership-map
Pass
Audited by Gen Agent Trust Hub on May 17, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The scripts
build_ownership_map.pyandcommunity_maintainers.pyusesubprocess.Popento executegitcommands. These invocations use the list-style format (e.g.,['git', '-C', repo, ... ]) without enabling the shell, which safely handles the repository path and prevents command injection. - [EXTERNAL_DOWNLOADS]: The skill requires the
networkxlibrary for graph processing and community detection. This is a standard, reputable Python package for its intended purpose. - [REMOTE_CODE_EXECUTION]: The script
run_ownership_map.pyexecutes a child process usingsys.executableto run the primary analysis script. This is a secure method for chaining script executions within a local environment. - [DATA_EXFILTRATION]: No network requests or data transmission patterns were identified. All analysis outputs (CSV and JSON) are written to a user-specified local directory.
Audit Metadata