checking-license-compliance
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill performs local analysis of dependency metadata from standard project locations.\n
- Evidence: The script
scripts/check_licenses.pyscanspackage.json,pyproject.toml, and metadata files withinnode_modulesor Python site-packages to extract license identifiers.\n- [SAFE]: No network operations or external data exfiltration patterns were identified.\n - Evidence: The
allowed-toolsconfiguration inSKILL.mdexplicitly disallowscurlandwget. The Python source code contains no networking modules or remote communication logic.\n- [SAFE]: No obfuscation, prompt injection, or persistence mechanisms are present in the documentation or the scripts.\n - Evidence: All analyzed files (
SKILL.md,references/PLAYBOOK.md,references/THEORY.md,scripts/check_licenses.py) consist of clear-text instructions and standard Python code.\n- [SAFE]: The dependency analysis logic uses safe parsing techniques.\n - Evidence: The script utilizes
json.load()and regular expressions for metadata extraction, avoiding dangerous execution functions likeeval(),exec(), or unsafe deserialization methods.
Audit Metadata