jpm-csr
Pass
Audited by Gen Agent Trust Hub on Sep 29, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses shell commands to interact with
opensslfor key and CSR generation. It implements strict validation logic for user-supplied inputs, including a comprehensive blacklist of shell metacharacters (such as;,&,|, and$) to prevent command injection vulnerabilities. - [CREDENTIALS_UNSAFE]: The skill is designed to handle cryptographic private keys safely. It enforces secure file permissions (
chmod 600), instructs the agent to never display or transmit the key content, and automatically updates the project's.gitignorefile to prevent accidental credential leakage to version control systems. - [SAFE]: The skill demonstrates high security standards for its intended purpose, including the use of temporary configuration files to avoid passing sensitive data via command-line arguments and providing clear remediation steps for users missing necessary system dependencies.
Audit Metadata