run
Pass
Audited by Gen Agent Trust Hub on Oct 4, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a complex orchestrator for security tools. It follows best practices for stack detection and tool selection.
- Uses standard project manifest files (e.g., package.json, requirements.txt) to detect technologies.
- Orchestrates known security scanners (e.g., semgrep, bandit, gitleaks) and redirects output to local report files.
- Implements parallel subagent execution for efficiency.
- Provides a structured consolidation phase to deduplicate and rank findings across multiple tools.
- The use of Bash commands is limited to environment checks (
which) and running local scanner binaries with redirection to files. No suspicious network activity or sensitive data exfiltration patterns were detected.
Audit Metadata