detecting-ssl-cert-issues
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The script uses subprocess.run to execute the openssl CLI for certificate analysis. The command is constructed using a list of arguments, preventing shell injection. Inputs are validated host and port values.
- [DYNAMIC_EXECUTION]: A dynamic import of the cryptography library is used to parse X.509 extensions. This is a local import of a legitimate library and does not execute untrusted remote code.
- [EXTERNAL_DOWNLOADS]: The skill references trusted industry sources such as crt.sh and letsencrypt for remediation and verification. These are standard, well-known services.
- [SAFE]: A mandatory authorization check is required before network probes are initiated. The skill also explicitly disallows dangerous operations like file deletion or modifications to system configuration directories.
Audit Metadata