okr-to-html
Pass
Audited by Gen Agent Trust Hub on Aug 7, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses a local Python script to transform Markdown files into HTML. The command execution is scoped to the skill's own scripts and standard system utilities.
- [SAFE]: Input data is rigorously sanitized. The
scripts/build.pyscript utilizeshtml.escape()for all user-controlled strings (titles, headings, key results) andjson.dumps()for structured data, effectively mitigating risks associated with processing untrusted content. - [DATA_EXFILTRATION]: No network activity, external API calls, or remote data transmissions were identified. All processing occurs locally.
- [SAFE]: The skill has no external dependencies or remote code downloads. It relies entirely on the included files and the system's Python 3 interpreter.
Audit Metadata