agency-application-security-engineer
Pass
Audited by Gen Agent Trust Hub on Jul 6, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill establishes a professional persona and provides educational resources for secure software development lifecycles.
- [COMMAND_EXECUTION]: The skill contains a Python script (
DependencyScanner) that utilizessubprocess.runto execute standard auditing tools likenpm auditandpip-audit. These commands are used for their intended diagnostic purposes and do not process untrusted external inputs in an unsafe manner. - [DATA_EXFILTRATION]: No evidence of unauthorized data collection or transmission was detected. Code examples correctly demonstrate the use of environment variables for secrets, rather than hardcoding credentials.
- [PROMPT_INJECTION]: The instructions focus on defining a functional role and do not contain patterns designed to bypass security guardrails or override agent instructions.
Audit Metadata