sans25
Pass
Audited by Gen Agent Trust Hub on Oct 4, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements a structured security analysis workflow based on the established SANS/CWE Top 25 framework. It uses scoped file access to perform pattern matching (via grep) and context analysis to identify common software weaknesses.
- [SAFE]: The skill uses localized resources (shared schemas and framework definitions) to guide its analysis and does not perform any remote code execution, external downloads, or data exfiltration.
- [SAFE]: The implementation follows best practices for security tooling, including language detection to scope applicable rules, severity assessment, and findings deduplication.
- [SAFE]: Instructions for 'Expert Mode' involve local risk scoring (DREAD) and vulnerability chaining analysis, which are standard security evaluation techniques.
Audit Metadata