python-toolsmith

Pass

Audited by Gen Agent Trust Hub on Apr 8, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: No malicious patterns or security risks were identified. The skill focuses on promoting secure development practices by providing defensive coding templates.
  • [COMMAND_EXECUTION]: The skill provides explicit guidance on the safe use of subprocesses, instructing developers to avoid shell=True and use argument lists to prevent shell injection vulnerabilities.
  • [PROMPT_INJECTION]: No evidence of prompt injection or attempts to override AI behavioral constraints was found in the instructions or templates.
  • [DATA_EXFILTRATION]: No network exfiltration patterns or unauthorized data access behaviors were detected. The templates manage data locally using SQLite and standard configuration directories.
  • [CREDENTIALS_UNSAFE]: The skill includes warnings against hardcoding secrets and provides templates for managing sensitive data using environment variables instead of hardcoded strings.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 8, 2026, 02:44 PM
Security Audit — agent-trust-hub — python-toolsmith