ontology-mapper
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security issues were detected. The skill follows best practices for security by design, including:
- Input Validation: All scripts (concept_mapper.py, crystal_mapper.py, sample_annotator.py) include strict type checking, range validation for numeric inputs (e.g., space groups 1-230, positive lattice constants), and length/count limits for natural language terms and JSON keys to prevent resource exhaustion or unexpected behavior.
- No Dynamic Execution: The code uses safe parsing methods (json.loads) and avoids dangerous functions like eval(), exec(), or subprocess calls.
- Least Privilege: The skill manifest (SKILL.md) correctly scopes its capabilities by only allowing Read, Grep, and Glob tools, which prevents the agent from executing shell commands or performing data exfiltration via network calls.
- No External Dependencies: The skill is self-contained and uses only the Python standard library, eliminating risks associated with untrusted third-party packages.
Audit Metadata