soc2-compliance
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill 'soc2-compliance' is a professional toolkit designed to assist organizations in preparing for SOC 2 Type I and Type II audits. It focuses on Trust Service Criteria (TSC) mapping and evidence collection workflows.
- [COMMAND_EXECUTION]: The skill includes three Python scripts (
control_matrix_builder.py,evidence_tracker.py, andgap_analyzer.py) that provide command-line utilities for managing compliance data. These scripts strictly use the Python standard library (argparse, json, csv, datetime) and do not perform any dangerous system calls, network requests, or unauthorized file modifications. - [DATA_EXPOSURE]: No hardcoded credentials, API keys, or access to sensitive system paths (such as .ssh, .aws, or .env) were detected. The scripts only process data from input files explicitly provided by the user via command-line arguments.
- [REMOTE_CODE_EXECUTION]: The skill does not contain any remote code download patterns or dynamic execution of external scripts. All logic is contained within the provided local files.
- [OBFUSCATION]: A thorough scan for Base64 encoding, zero-width characters, and homoglyph attacks yielded no results. The code and documentation are presented in clear, human-readable text.
Audit Metadata