get-available-resources
Pass
Audited by Gen Agent Trust Hub on Oct 24, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes system discovery tools such as nvidia-smi, sysctl, and system_profiler to determine available resources. These calls use fixed argument lists and disable shell execution (shell=False), preventing command injection.
- [DYNAMIC_EXECUTION]: Uses importlib.import_module for lazy loading of the optional psutil library. This is used strictly for enhanced hardware telemetry and does not involve untrusted input or remote code.
- [DATA_EXPOSURE]: While the skill probes system configuration, it implements proactive privacy measures and explicitly redacts hostnames, absolute paths, and unique device identifiers from its output.
- [SAFE]: Implements secure file handling practices, including mandatory 0600 (read/write only by owner) permissions for output files and strict path traversal checks to prevent writing outside the current directory.
Audit Metadata