Skills
skills/gooseworks-ai/goose-skills/tech-stack-teardown/Gen Agent Trust Hub

tech-stack-teardown

Pass

Audited by Gen Agent Trust Hub on Apr 10, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The scripts/recon.py script executes the dig and curl utilities using subprocess.run. Arguments are passed as a list rather than a single string, which effectively prevents shell command injection from untrusted domain inputs.
  • [EXTERNAL_DOWNLOADS]: The skill fetches content from target websites and interacts with the Apify API (or a vendor-provided proxy at api.gooseworks.ai) to perform technology profiling. These network operations are transparently documented and align with the skill's stated purpose.
  • [SAFE]: No obfuscation, malicious data exfiltration, or persistence mechanisms were detected. API tokens for third-party services are managed through environment variables as per standard security best practices.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 10, 2026, 10:47 AM