skills/jpmorgan-payments/ai/jpm-csr/Gen Agent Trust Hub

jpm-csr

Pass

Audited by Gen Agent Trust Hub on Sep 29, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses shell commands to interact with openssl for key and CSR generation. It implements strict validation logic for user-supplied inputs, including a comprehensive blacklist of shell metacharacters (such as ;, &, |, and $) to prevent command injection vulnerabilities.
  • [CREDENTIALS_UNSAFE]: The skill is designed to handle cryptographic private keys safely. It enforces secure file permissions (chmod 600), instructs the agent to never display or transmit the key content, and automatically updates the project's .gitignore file to prevent accidental credential leakage to version control systems.
  • [SAFE]: The skill demonstrates high security standards for its intended purpose, including the use of temporary configuration files to avoid passing sensitive data via command-line arguments and providing clear remediation steps for users missing necessary system dependencies.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 29, 2026, 05:40 PM