uncertainty-and-units

Pass

Audited by Gen Agent Trust Hub on Jul 26, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill implements a secure mathematical expression evaluator in scripts/_common.py that parses input into an Abstract Syntax Tree (AST) and validates it against a strict whitelist of nodes and functions, effectively preventing arbitrary code execution.
  • [SAFE]: File system operations are protected by validation helpers that enforce path boundaries, reject symbolic links and network URLs, and ensure output files are written with restricted permissions (0o600).
  • [SAFE]: Dependencies are restricted to reputable, version-pinned scientific libraries from standard registries, with no evidence of typosquatting or malicious package usage.
  • [SAFE]: The code auditing tool (audit_units.py) performs static analysis by parsing source files without importing or executing them, which prevents the accidental execution of malicious code within the analyzed files.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 26, 2026, 11:18 PM
Security Audit — agent-trust-hub — uncertainty-and-units