mitre
Pass
Audited by Gen Agent Trust Hub on Oct 4, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill operates as a pure data enrichment and mapping tool. It takes existing security findings (from OWASP, STRIDE, or SANS/CWE) and correlates them with the MITRE ATT&CK framework using local reference files.
- [SAFE]: No external network dependencies or remote code downloads were detected. All reference frameworks (MITRE, DREAD) and schemas are accessed via local relative paths (e.g.,
../../shared/frameworks/mitre-attck.md). - [SAFE]: The skill does not access sensitive system areas or credentials. It specifically works with security findings generated by other tools or provided in a structured
.appsec/findings.jsonfile. - [SAFE]: The execution logic is based on pattern matching and cross-referencing tables. There is no dynamic code generation, obfuscation, or privilege escalation patterns present in the instructions.
Audit Metadata