okr-to-html

Pass

Audited by Gen Agent Trust Hub on Aug 7, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses a local Python script to transform Markdown files into HTML. The command execution is scoped to the skill's own scripts and standard system utilities.
  • [SAFE]: Input data is rigorously sanitized. The scripts/build.py script utilizes html.escape() for all user-controlled strings (titles, headings, key results) and json.dumps() for structured data, effectively mitigating risks associated with processing untrusted content.
  • [DATA_EXFILTRATION]: No network activity, external API calls, or remote data transmissions were identified. All processing occurs locally.
  • [SAFE]: The skill has no external dependencies or remote code downloads. It relies entirely on the included files and the system's Python 3 interpreter.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 7, 2026, 03:12 PM
Security Audit — agent-trust-hub — okr-to-html