skills/glebis/claude-skills/vault/Gen Agent Trust Hub

vault

Pass

Audited by Gen Agent Trust Hub on Jun 12, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The script scripts/vault.py executes local system utilities fdesetup status and age-keygen via subprocess.run to audit system security status. These calls use argument lists rather than shell strings, preventing command injection.
  • [DATA_EXFILTRATION]: The skill probes for the presence of security-sensitive files (e.g., age.key, keys.txt) and disk mount points. This is conducted locally for the purpose of a configuration audit; no file content is read or transmitted externally.
  • [SAFE]: The skill operates entirely locally with no network capabilities. It adheres to a non-destructive design where state-changing commands (like key generation) are guarded by explicit flags, and other setup commands are only printed for manual user review and execution.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 12, 2026, 10:20 PM
Security Audit — agent-trust-hub — vault