security-preflight
Pass
Audited by Gen Agent Trust Hub on Jul 22, 2026
Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides bash commands to execute several third-party security CLI tools, including Gitleaks, npm audit, cargo audit, OSV-Scanner, and Semgrep. These are standard tools used for repository auditing.
- [DATA_EXFILTRATION]: The instructions include a command to search the file system for sensitive file patterns such as
.env,.pem,id_rsa,credentials, andapi-token. This is performed locally viagit ls-filesandgrepspecifically to identify and block the exposure of secrets in the repository history, rather than to exfiltrate them to an external source.
Audit Metadata