security-audit
Pass
Audited by Gen Agent Trust Hub on Aug 19, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill performs extensive shell operations to audit the project environment. These include:\n
- Using
grepandfindto identify potentially exposed secrets, API keys, and private keys in the source code and configuration files.\n - Executing
gitcommands to inspect commit history for sensitive information previously removed from current files.\n - Searching for prompt injection patterns like zero-width characters, ANSI escapes, and hidden HTML comments.\n- [EXTERNAL_DOWNLOADS]: The skill leverages industry-standard security auditing tools to assess dependency health, including
pip-auditfor Python projects,npm auditfor Node.js projects,cargo auditfor Rust projects, andgovulncheckfor Go projects. These tools query official repositories for known vulnerabilities, which is standard behavior for an audit utility.
Audit Metadata