tech-stack-evaluator
Pass
Audited by Gen Agent Trust Hub on Jul 18, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill operates as a localized analytical tool. All scripts process data provided within the agent's execution context without initiating unauthorized network connections or sensitive data access.
- [SAFE]: Input parsing logic in
scripts/format_detector.pyutilizes safe methods likejson.loadsand regex-based extraction. The custom YAML parser avoids unsafe deserialization vulnerabilities by manually processing key-value pairs. - [SAFE]: Security evaluation logic in
scripts/security_assessor.pyand ecosystem analysis inscripts/ecosystem_analyzer.pyare purely mathematical and logic-based, presenting no risk to the host environment. - [SAFE]: No evidence of prompt injection, obfuscated URLs, or credential exposure was found. The skill maintains a clear separation between analytical logic and data input.
Audit Metadata