skills/jeremylongshore/tons-of-skills-marketplace/confirming-pentest-authorization/Gen Agent Trust Hub
confirming-pentest-authorization
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns, prompt injections, or data exfiltration vectors were identified during the analysis. The skill serves a legitimate security purpose as an authorization gate.
- [COMMAND_EXECUTION]: The skill executes a local Python script (
check_authorization.py) to perform validation logic. The tool permissions are appropriately restricted in the frontmatter, explicitly disallowing network-capable utilities (curl, wget) and destructive commands (rm), which minimizes the potential for abuse. - [DYNAMIC_EXECUTION]: The skill processes external YAML files using
yaml.safe_load()or a minimal manual parser that avoids executing arbitrary code during deserialization, protecting against unsafe content in the ROE files.
Audit Metadata