uncertainty-and-units
Pass
Audited by Gen Agent Trust Hub on Jul 26, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements a secure mathematical expression evaluator in
scripts/_common.pythat parses input into an Abstract Syntax Tree (AST) and validates it against a strict whitelist of nodes and functions, effectively preventing arbitrary code execution. - [SAFE]: File system operations are protected by validation helpers that enforce path boundaries, reject symbolic links and network URLs, and ensure output files are written with restricted permissions (0o600).
- [SAFE]: Dependencies are restricted to reputable, version-pinned scientific libraries from standard registries, with no evidence of typosquatting or malicious package usage.
- [SAFE]: The code auditing tool (
audit_units.py) performs static analysis by parsing source files without importing or executing them, which prevents the accidental execution of malicious code within the analyzed files.
Audit Metadata